nebula-plugins/gradle-lint-plugin

False positive when using spotbugs annotations

Open

#239 opened on Apr 25, 2019

View on GitHub
 (0 comments) (1 reaction) (0 assignees)Groovy (89 forks)batch import
Hacktoberfest

Repository metrics

Stars
 (795 stars)
PR merge metrics
 (No merged PRs in 30d)

Description

The spotbugs migration guide suggests to replace com.google.code.findbugs:annotations with net.jcip:jcip-annotations:1.0 and com.github.spotbugs:spotbugs-annotations:4.0.0-beta1.

When doing so on a project, that uses spotbugs, the lint plugin fails with

undeclared-dependency              one or more classes in com.google.code.findbugs:annotations:2.0.1 are required by your code directly
unused-dependency                  one or more classes in com.google.code.findbugs:annotations:2.0.1 are required by your code directly

Contributor guide

Research direction
Investigate how the plugin determines undeclared and unused dependencies, and why spotbugs annotations trigger false positives. Look at the dependency analysis logic and check for known issues with annotations that are not directly used in code but are required for compilation.
Tech stack
groovyjava
Domain
build systembackend
Issue type
Bug
DifficultyEstimated implementation difficulty for a new contributor, from 1 for very small changes to 5 for expert-level work.
2
Estimated timeA rough time range for an experienced contributor to investigate, implement, test, and prepare a pull request.
1-3 hours
Activity statusHow available the issue appears right now: fresh, active, stale, blocked, or waiting on maintainer input.
Active
ClarityHow clearly the issue explains the expected change, acceptance criteria, and next step.
Clear
Prerequisites
GradleJavaGroovy
Newbie friendlinessA 1-100 score estimating how approachable this issue is for first-time contributors.
60