Add "Locations" to the Maven plugin

[chrisdutz]

Starting with Maven 3 the "org.apache.maven.model.Dependenc" has a map of "locations" in which Maven specifies from which location a "version", "scope", ... is managed. This information could be extremely helpfull for rules like "Third Party Dependencies are managed by the Main Company Pom".

[obfischer]

Hi @chrisdutz, we already have plans to extend and to improve the Maven integration and to provide much more information via the generated graph model in one of the next versions.

[DirkMahler]

This feature requires a change in the data model, current is:

(pom:Maven:Pom)-[dependency:DECLARES_DEPENDENCY]-(artifact:Artifact)

where dependency has some properties (e.g. scope). After the change we would need an additional node:

(pom:Maven:Pom)-[:DECLARES_DEPENDENCY]->(dependency:Maven:Dependency),
(dependency)-[:IS_ARTIFACT]->(artifact:Artifact),
(dependency)-[:HAS_LOCATION]->(???) // is it the POM, e.g. :Maven:Pom?

We could also add extra information, e.g.

(dependency)-[:EXCLUDES_ARTIFACT]->(excludedArtifact:Artifact)

[chrisdutz]

I think this is very valuable information explicitly if you want to create rules such as "third party libs have to be specified in our central dependencyManagement" ... otherwise I think people will simply omit the version and add a dependencyManagement block to the local pom. With this I could explicitly check in what artifact a dependency was managed.