-
Notifications
You must be signed in to change notification settings - Fork 35
/
project.clj
55 lines (55 loc) · 3.47 KB
/
project.clj
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
(defproject nvd-clojure "1.9.0"
:description "National Vulnerability Database [https://nvd.nist.gov/] dependency-checker"
:url "https://github.com/rm-hull/nvd-clojure"
:license {:name "The MIT License (MIT)"
:url "http://opensource.org/licenses/MIT"}
:dependencies [[org.clojure/clojure "1.10.3"]
[clansi "1.0.0"]
[org.clojure/data.json "2.4.0"]
[org.slf4j/slf4j-simple "2.0.0-alpha1"]
[org.owasp/dependency-check-core "6.5.0"]
[rm-hull/table "0.7.1"]
[trptcolin/versioneer "0.2.0"]
[org.clojure/java.classpath "1.0.0"]
[org.clojure/tools.deps.alpha "0.12.1071" :exclusions [org.slf4j/jcl-over-slf4j
org.eclipse.jetty/jetty-http
org.eclipse.jetty/jetty-util]]
;; Explicitly depend on a certain Jackson, consistently.
;; Otherwise, when using the Lein plugin, Leiningen's own dependencies can pull a different Jackson version
;; (see https://github.com/jeremylong/DependencyCheck/issues/3441):
[com.fasterxml.jackson.core/jackson-databind "2.13.0"]
[com.fasterxml.jackson.core/jackson-annotations "2.13.0"]
[com.fasterxml.jackson.core/jackson-core "2.13.0"]
[com.fasterxml.jackson.module/jackson-module-afterburner "2.13.0"]
[org.apache.maven.resolver/maven-resolver-transport-http "1.7.2" #_"Fixes a CVE"]
[org.apache.maven/maven-core "3.8.3" #_"Fixes a CVE"]
[org.eclipse.jetty/jetty-client "11.0.7" #_"Fixes a CVE" :exclusions [org.slf4j/slf4j-api]]
[org.apache.maven.resolver/maven-resolver-spi "1.7.2" #_"Satisfies :pedantic?"]
[org.apache.maven.resolver/maven-resolver-api "1.7.2" #_"Satisfies :pedantic?"]
[org.apache.maven.resolver/maven-resolver-util "1.7.2" #_"Satisfies :pedantic?"]
[org.apache.maven.resolver/maven-resolver-impl "1.7.2" #_"Satisfies :pedantic?"]
[org.apache.maven/maven-resolver-provider "3.8.3" #_"Satisfies :pedantic?"]
[org.codehaus.plexus/plexus-utils "3.4.1" #_"Satisfies :pedantic?"]]
:scm {:url "git@github.com:rm-hull/nvd-clojure.git"}
:source-paths ["src"]
:jar-exclusions [#"(?:^|/).git"]
:codox {
:source-paths ["src"]
:output-path "doc/api"
:source-uri "https://github.com/rm-hull/nvd-clojure/blob/master/{filepath}#L{line}"}
:min-lein-version "2.8.1"
:target-path "target/%s"
:profiles {:dev {:global-vars {*warn-on-reflection* true}
:plugins [[lein-cljfmt "0.7.0"]
[lein-codox "0.10.7"]
[lein-cloverage "1.2.2"]
[lein-ancient "0.7.0"]
[jonase/eastwood "0.9.9"]]
:dependencies [[clj-kondo "2021.10.19"]
[commons-collections "20040616"]]}
:ci {:pedantic? :abort}
:clj-kondo {:dependencies [[clj-kondo "2021.10.19"]]}}
:deploy-repositories [["clojars" {:url "https://clojars.org/repo"
:username :env/clojars_username
:password :env/clojars_password
:sign-releases false}]])