Research
Security News
Malicious npm Packages Inject SSH Backdoors via Typosquatted Libraries
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
org.jreleaser:ftp-java-sdk
Advanced tools
:linkattrs: :project-owner: jreleaser :project-name: jreleaser :project-group: org.jreleaser :project-version: 1.2.0
image::src/media/banner.png[JReleaser]
image:https://img.shields.io/github/workflow/status/{project-owner}/{project-name}/EarlyAccess?logo=github["Build Status", link="https://github.com/{project-owner}/{project-name}/actions"] image:https://bestpractices.coreinfrastructure.org/projects/6393/badge["OpenSSF Best Practices", link="https://bestpractices.coreinfrastructure.org/projects/6393"]
Release Java and non-Java projects quickly and easily with link:https://jreleaser.org[JReleaser]!
JReleaser is a release automation tool for Java and non-Java projects. Its goal is to simplify creating releases and publishing artifacts to multiple package managers while providing customizable options.
For questions, support and general discussion, please use link:https://github.com/jreleaser/jreleaser/discussions[GitHub Discussions].
image:https://img.shields.io/github/downloads/{project-owner}/{project-name}/total[GitHub all releases] image:https://img.shields.io/docker/pulls/{project-owner}/{project-owner}-slim?label={project-owner}-slim&logo=docker&logoColor=white[Docker Pulls {project-owner}-slim] image:https://img.shields.io/docker/pulls/{project-owner}/{project-owner}-alpine?label={project-owner}-alpine&logo=docker&logoColor=white[Docker Pulls {project-owner}-alpine]
== Install
There are multiple choices depending on your preference.
=== CLI The CLI can be installed in the following ways:
Homebrew:
Scoop:
Sdkman:
JBang
Fedora COPR
Macports
Chocolatey
Curl
// Get the jreleaser downloader curl -sL https://git.io/get-jreleaser > get_jreleaser.java
// Download JReleaser with version =
// Change to a tagged JReleaser release
// or leave it out to pull latest
.
java get_jreleaser.java
Dagger
Head to the documentation page of the link:https://github.com/dagger/dagger/tree/main/pkg/universe.dagger.io/alpha/jreleaser[universe.dagger.io/alpha/jreleaser] package to find out how to configure JReleaser in your Dagger powered CI/CD pipeline.
manually:
Download the pre-compiled binary from the link:https://github.com/jreleaser/jreleaser/releases[releases page], uncompress and copy to the desired location.
Be mindful that jreleaser-{project-version}.zip
requires Java 8 to be installed while
jreleaser-standalone-{project-version}-[linux|osx|windows].zip
can be used without a previous installation of Java as
it includes its own Java Runtime.
=== Docker
You can run JReleaser as a docker image, skipping the need to have a pre-installed Java runtime. You must mount the
working directory at the /workspace
volume, for example assuming the current directory is the starting point:
(pwd)
:/workspace Where image may be jreleaser-slim
, jreleaser-alpine
.
NOTE: The jreleaser
command will be automatically executed inside /workspace
.
You may also need to map environment variables to the container, such as JRELEASER_PROJECT_VERSION
,
JRELEASER_GITHUB_TOKEN
, or others depending on your setup. Refer to the
link:https://jreleaser.org/guide/latest/configuration/environment.html[configuration] pages.
You can find the tag listing link:hub.docker.com/r/jreleaser/jreleaser-slim/tags[here].
=== Maven Configure the jreleaser-maven-plugin in your POM file
=== Gradle
Configure the jreleaser-gradle-plugin in your build.gradle
or settings.gradle
file
=== Ant
Download the jreleaser-ant-tasks ZIP bundle from the
link:https://github.com/jreleaser/jreleaser/releases[releases page] and unzip it in your project. Place all JARs inside
the lib
folder. Create this folder if there is none. Add the following elements to your build.xml
file
== Badges
image:https://img.shields.io/lgtm/alerts/g/{project-owner}/{project-owner}.svg?logo=lgtm&logoWidth=18[link="https://lgtm.com/projects/g/{project-owner}/{project-owner}/alerts"] image:https://img.shields.io/lgtm/grade/java/g/{project-owner}/{project-owner}.svg?logo=lgtm&logoWidth=18[link="https://lgtm.com/projects/g/{project-owner}/{project-owner}/context:java"]
FAQs
Unknown package
We found that org.jreleaser:ftp-java-sdk demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 0 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
Security News
MITRE's 2024 CWE Top 25 highlights critical software vulnerabilities like XSS, SQL Injection, and CSRF, reflecting shifts due to a refined ranking methodology.
Security News
In this segment of the Risky Business podcast, Feross Aboukhadijeh and Patrick Gray discuss the challenges of tracking malware discovered in open source softare.