soot-infoflow-android uses has a non-existent version of axml

[jpstotz]

soot-infoflow-android has axml version 2.1.4 as dependency:

FlowDroid/soot-infoflow-android/pom.xml

Lines 157 to 161 in 2a6649a

	<dependency>
	<groupId>de.upb.cs.swt</groupId>
	<artifactId>axml</artifactId>
	<version>2.1.4</version>
	</dependency>

Problem is that this version is not available in any of the common Maven repos. https://mvnrepository.com/artifact/de.upb.cs.swt/axml

My guess is that this version was released on JCenter which has been shut down.

Latest available version is now 2.1.3.

[StevenArzt]

This is an annoying problem. The person who maintained this component at UPB has left and Maven Central keeps asking that he confirms granting access to whoever wants to continue maintenance. That's somewhat understandable because they have his email address as maintainer, but it also means that we cannot say "listen, this guy is no longer with us, someone else will take over". I have discussed this with the UPB team, I have been in CC in their discussions with Maven Central Support, and it's simply a dead end.

If I find the time, I'll publish this component in the Fraunhofer scope on Maven Central. Once that is done, we can have a proper new release.

By the way, this stupid issue also blocks a proper FlowDroid release. As I said, we'll simply taken over axml at somne point.

[MarcMil]

Workaround in the meantime:

git clone https://github.com/Sable/axml.git
cd axml
mvn install