Is it somehow possible to trace the source of an artifact in a maven proxy repository in Nexus (either OSS or Pro) ? And by trace I mean the source which added a particular dependency in their pom file. Because of the way Maven works, it downloads all transitive dependencies automatically…as an exa…

NXRM just proxies the requests for the artifacts. It doesn’t know anything about the transitive dependencies. You can run mvn dependency:tree on your projects to try to track down the source of the dependency.

It would work for dependencies coming out of my pom, but it still does not show me the dependencies which are coming out of maven plugin. E.g. as I ran mvn dependnecy:tree it downloaded tons of jars, which were probably referred by maven dependency plugin, and won’t show up in mvn dependnecy:tree.

[image] richm123: xmlpull You can use Dependency Track for this :slight_smile:

There are plenty of software bill of material software that exists including our Nexus Lifecycle , however that still likely wouldn’t as Rich mentioned track build plugin dependencies.

In Dependency Track you can see the usage of a specific dependencies across a whole portfolio of projects. In Artifactory you are able to see which CI build produced the artifact…

Trace the source of an artifact in Nexus Repository

Sonatype Nexus Repository

mpiggott (Matthew Piggott) May 26, 2021, 2:38pm 7

Again, he’s not asking about project dependencies.

Topic		Replies	Views
Nexus 3 plugin maven dependencies Sonatype Nexus Repository maven	1	1297	December 8, 2020
Api to pre fetch artifacts from proxy repo Sonatype Nexus Repository nexus-repository	0	292	June 4, 2024
Log new entries accessed via proxy Sonatype Nexus Repository	2	629	May 5, 2021
Maven build fails intermittently due to artificats not found error Sonatype Nexus Repository nexus-repository	12	25490	November 21, 2019
Migration path from Artifactory to NXRM3 Sonatype Nexus Repository nxrm3 , artifactory , migrate	1	2396	November 20, 2019

Trace the source of an artifact in Nexus Repository

Related topics