[security-dev] PicketLink3 and Apache Deltaspike Dependencies

[Anil Saldhana]

Scratch this plan.  Shane and I determined that this is larger than we
originally thought -> lots of DS classes need to be forked.


On 02/13/2013 10:25 AM, Anil Saldhana wrote:
> Hi all,
>     PicketLink3 is on the final stretch of release cycles.  One of the
> concerns I have had is the Apache Deltaspike dependency which is some
> type of incubating snapshot. Since there are very few Deltaspike classes
> (3-5 in number) that we depend on, the following strategy should work:
> - Copy the source files (Retaining Apache Headers) as it is from Apache
> Deltaspike to a PicketLink namespace such as : org.picketlink.deltaspike.*
> - Remove the Apache Deltaspike dependency.
>
> In few months, when Apache Deltaspike has proper releases, we can remove
> the PicketLink Deltaspike forked classes and bring back the Apache
> Deltaspike dependency back.  I do not think PicketLink users will
> directly code to DS classes.
>
> I ran this with Pete Muir, Shane and Jason Porter and they all agreed
> that this is a good strategy (I did refine the strategy based on Shane's
> comments).
>
> Regards,
> Anil