sbt-dependency-check
SBT Plugin for OWASP DependencyCheck. Monitor your dependencies and report if there are any publicly known vulnerabilities (e.g. CVEs). :rainbow: (by albuch)
sbt-assembly
Deploy über-JARs. Restart processes. (port of codahale/assembly-sbt) (by sbt)
Our great sponsors
| sbt-dependency-check | sbt-assembly | |
|---|---|---|
| 1 | 6 | |
| 260 | 1,932 | |
| - | 0.1% | |
| 5.7 | 6.6 | |
| 2 months ago | about 1 month ago | |
| Scala | Scala | |
| Apache License 2.0 | MIT License |
The number of mentions indicates the total number of mentions that we've tracked plus the number of user suggested alternatives.
Stars - the number of stars that a project has on GitHub. Growth - month over month growth in stars.
Activity is a relative number indicating how actively a project is being developed. Recent commits have higher weight than older ones.
For example, an activity of 9.0 indicates that a project is amongst the top 10% of the most actively developed projects that we are tracking.
Stars - the number of stars that a project has on GitHub. Growth - month over month growth in stars.
Activity is a relative number indicating how actively a project is being developed. Recent commits have higher weight than older ones.
For example, an activity of 9.0 indicates that a project is amongst the top 10% of the most actively developed projects that we are tracking.
sbt-dependency-check
Posts with mentions or reviews of sbt-dependency-check.
We have used some of these posts to build our list of alternatives
and similar projects.
sbt-assembly
Posts with mentions or reviews of sbt-assembly.
We have used some of these posts to build our list of alternatives
and similar projects. The last one was on 2023-12-07.
-
Trouble with sbt-native-packager
sbt-assembly is still my go-to. So what I'd prefer is the combination of sbt-assembly (to build my .jar that I can just java -jar anytime I want) and sbt-jib (to construct my OCI image including my assembly .jar for deployment in some container orchestration environment).
- sbt-assembly 2.0.0-RC1 released
-
SBT error when running package application: java.lang.RuntimeException: No main class detected.
You may also use sbt-assembly to produce an uber JAR that embeds the Scala stdlib together with your code, which means that now for running your program you only need a JRE like java -jar app-assembly.jar. This option is great because now if you start adding dependencies to your project those are also included in this massive JAR.
-
Welcome to JAR Hell, Part 2: Deployment Strategies
Sbt-assembly defaults to silently concatenating configs. But even if it didn't, the configs wouldn't be in any particular order when resolving.
-
How to handle sbt deduplication errors on module-info.class files
Ticket of record is https://github.com/sbt/sbt-assembly/issues/391
-
Building native images and compiling with GraalVM and sbt
With the sbt-assembly plugin you can create JAR-files with all of its dependencies (fat JARs). sbt assembly creates this target/scala-2.12/apply-at-vdb-assembly-0.1.0-SNAPSHOT.jar which has a size of around 42MB:
What are some alternatives?
When comparing sbt-dependency-check and sbt-assembly you can also consider the following projects:
security - Collection of CVEs from Sick Codes, or collaborations on https://sick.codes security research & advisories.
sbt-native-packager - sbt Native Packager
sbt-updates - sbt plugin that can check Maven and Ivy repositories for dependency updates
coursier - Pure Scala Artifact Fetching
splain - better implicit errors for scala
sbt-release - A release plugin for sbt
sbt-versions
sbt-docker - Create Docker images directly from sbt
pwndoc - Pentest Report Generator
sbt-buildinfo - I know this because build.sbt knows this.
sbt-pack - A sbt plugin for creating distributable Scala packages.
sbt-dependency-check vs security
sbt-assembly vs sbt-native-packager
sbt-dependency-check vs sbt-updates
sbt-assembly vs coursier
sbt-dependency-check vs splain
sbt-assembly vs sbt-release
sbt-dependency-check vs sbt-versions
sbt-assembly vs sbt-docker
sbt-dependency-check vs pwndoc
sbt-assembly vs sbt-buildinfo
sbt-dependency-check vs sbt-buildinfo
sbt-assembly vs sbt-pack