...
- Bouncy castle (for GPG signature checking).
- This is already a dependency, so we assume that we are covered
- Commons-compress (needed to unpick tgz files)
- This is Apache licensed
- But its dependencies are not and work is need to fulfill their requirements. (one 2-Clause BSD , one MIT)
- It looks as thought the stated dependencies are not real, They do not live in the POM and they are not in our repository.
- The is the perpetual where to put the classes question.
- This is all being developed in the idp-installer project
- But if we want to report about plugin status in an admin page or jsp or some sy