如何理解 Maven 依赖树

Posted 2023-02-26

技术标签:

【中文标题】如何理解 Maven 依赖树【英文标题】：How to understand Maven dependency tree 【发布时间】：2014-04-16 22:07:01 【问题描述】：

如果这是一个转储问题，请原谅，但我进行了很多搜索，但无法理解如何实际阅读 Maven Dependency tee。我知道这个命令是用来找出依赖关系的，但是怎么做呢？这是我项目中mvn dependency:tree -Dverbose 的结果。

[INFO] +- org.springframework:spring-core:jar:4.0.2.RELEASE:compile
[INFO] |  \- commons-logging:commons-logging:jar:1.1.3:compile
[INFO] +- org.springframework:spring-web:jar:4.0.2.RELEASE:compile
[INFO] |  +- (org.springframework:spring-aop:jar:4.0.2.RELEASE:compile - omitted for duplicate)
[INFO] |  +- org.springframework:spring-beans:jar:4.0.2.RELEASE:compile
[INFO] |  |  \- (org.springframework:spring-core:jar:4.0.2.RELEASE:compile - omitted for duplicate)
[INFO] |  +- (org.springframework:spring-context:jar:4.0.2.RELEASE:compile - omitted for duplicate)
[INFO] |  \- (org.springframework:spring-core:jar:4.0.2.RELEASE:compile - omitted for duplicate)
[INFO] +- org.springframework:spring-webmvc:jar:4.0.2.RELEASE:compile
[INFO] |  +- (org.springframework:spring-beans:jar:4.0.2.RELEASE:compile - omitted for duplicate)
[INFO] |  +- (org.springframework:spring-context:jar:4.0.2.RELEASE:compile - omitted for duplicate)
[INFO] |  +- (org.springframework:spring-core:jar:4.0.2.RELEASE:compile - omitted for duplicate)
[INFO] |  +- org.springframework:spring-expression:jar:4.0.2.RELEASE:compile
[INFO] |  |  \- (org.springframework:spring-core:jar:4.0.2.RELEASE:compile - omitted for duplicate)
[INFO] |  \- (org.springframework:spring-web:jar:4.0.2.RELEASE:compile - omitted for duplicate)
[INFO] +- org.springframework:spring-context:jar:4.0.2.RELEASE:compile
[INFO] |  +- (org.springframework:spring-aop:jar:4.0.2.RELEASE:compile - omitted for duplicate)
[INFO] |  +- (org.springframework:spring-beans:jar:4.0.2.RELEASE:compile - omitted for duplicate)
[INFO] |  +- (org.springframework:spring-core:jar:4.0.2.RELEASE:compile - omitted for duplicate)
[INFO] |  \- (org.springframework:spring-expression:jar:4.0.2.RELEASE:compile - omitted for duplicate)
[INFO] +- org.springframework:spring-aop:jar:3.0.0.RC3:compile
[INFO] |  +- aopalliance:aopalliance:jar:1.0:compile
[INFO] |  +- org.springframework:spring-asm:jar:3.0.0.RC3:compile
[INFO] |  +- (org.springframework:spring-beans:jar:3.0.0.RC3:compile - omitted for conflict with 4.0.2.RELEASE)
[INFO] |  \- (org.springframework:spring-core:jar:3.0.0.RC3:compile - omitted for conflict with 4.0.2.RELEASE)
[INFO] +- org.springframework:spring-tx:jar:4.0.2.RELEASE:compile
[INFO] |  +- (org.springframework:spring-beans:jar:4.0.2.RELEASE:compile - omitted for duplicate)
[INFO] |  \- (org.springframework:spring-core:jar:4.0.2.RELEASE:compile - omitted for duplicate)
[INFO] +- org.springframework:spring-orm:jar:4.0.2.RELEASE:compile
[INFO] |  +- (org.springframework:spring-beans:jar:4.0.2.RELEASE:compile - omitted for duplicate)
[INFO] |  +- (org.springframework:spring-core:jar:4.0.2.RELEASE:compile - omitted for duplicate)
[INFO] |  +- org.springframework:spring-jdbc:jar:4.0.2.RELEASE:compile
[INFO] |  |  +- (org.springframework:spring-beans:jar:4.0.2.RELEASE:compile - omitted for duplicate)
[INFO] |  |  +- (org.springframework:spring-core:jar:4.0.2.RELEASE:compile - omitted for duplicate)
[INFO] |  |  \- (org.springframework:spring-tx:jar:4.0.2.RELEASE:compile - omitted for duplicate)
[INFO] |  \- (org.springframework:spring-tx:jar:4.0.2.RELEASE:compile - omitted for duplicate)
[INFO] +- org.springframework.security:spring-security-core:jar:3.2.2.RELEASE:compile
[INFO] |  +- (aopalliance:aopalliance:jar:1.0:compile - omitted for duplicate)
[INFO] |  +- (org.springframework:spring-aop:jar:3.2.8.RELEASE:compile - omitted for conflict with 3.0.0.RC3)
[INFO] |  +- (org.springframework:spring-beans:jar:3.2.8.RELEASE:compile - omitted for conflict with 4.0.2.RELEASE)
[INFO] |  +- (org.springframework:spring-context:jar:3.2.8.RELEASE:compile - omitted for conflict with 4.0.2.RELEASE)
[INFO] |  +- (org.springframework:spring-core:jar:3.2.8.RELEASE:compile - omitted for conflict with 4.0.2.RELEASE)
[INFO] |  \- (org.springframework:spring-expression:jar:3.2.8.RELEASE:compile - omitted for conflict with 4.0.2.RELEASE)
[INFO] +- org.springframework.security:spring-security-web:jar:3.2.2.RELEASE:compile
[INFO] |  +- (aopalliance:aopalliance:jar:1.0:compile - omitted for duplicate)
[INFO] |  +- (org.springframework.security:spring-security-core:jar:3.2.2.RELEASE:compile - omitted for duplicate)
[INFO] |  +- (org.springframework:spring-beans:jar:3.2.8.RELEASE:compile - omitted for conflict with 4.0.2.RELEASE)
[INFO] |  +- (org.springframework:spring-context:jar:3.2.8.RELEASE:compile - omitted for conflict with 4.0.2.RELEASE)
[INFO] |  +- (org.springframework:spring-core:jar:3.2.8.RELEASE:compile - omitted for conflict with 4.0.2.RELEASE)
[INFO] |  +- (org.springframework:spring-expression:jar:3.2.8.RELEASE:compile - omitted for conflict with 4.0.2.RELEASE)
[INFO] |  \- (org.springframework:spring-web:jar:3.2.8.RELEASE:compile - omitted for conflict with 4.0.2.RELEASE)
[INFO] +- org.springframework.security:spring-security-config:jar:3.2.2.RELEASE:compile
[INFO] |  +- (aopalliance:aopalliance:jar:1.0:compile - omitted for duplicate)
[INFO] |  +- (org.springframework.security:spring-security-core:jar:3.2.2.RELEASE:compile - omitted for duplicate)
[INFO] |  +- (org.springframework:spring-aop:jar:3.2.8.RELEASE:compile - omitted for conflict with 3.0.0.RC3)
[INFO] |  +- (org.springframework:spring-beans:jar:3.2.8.RELEASE:compile - omitted for conflict with 4.0.2.RELEASE)
[INFO] |  +- (org.springframework:spring-context:jar:3.2.8.RELEASE:compile - omitted for conflict with 4.0.2.RELEASE)
[INFO] |  \- (org.springframework:spring-core:jar:3.2.8.RELEASE:compile - omitted for conflict with 4.0.2.RELEASE)
[INFO] +- javax.servlet:javax.servlet-api:jar:3.1.0:compile
[INFO] +- org.glassfish.jersey.core:jersey-server:jar:2.6:compile
[INFO] |  +- org.glassfish.jersey.core:jersey-common:jar:2.6:compile
[INFO] |  |  +- (javax.ws.rs:javax.ws.rs-api:jar:2.0:compile - omitted for duplicate)
[INFO] |  |  +- (javax.annotation:javax.annotation-api:jar:1.2:compile - omitted for duplicate)
[INFO] |  |  +- org.glassfish.jersey.bundles.repackaged:jersey-guava:jar:2.6:compile
[INFO] |  |  +- (org.glassfish.hk2:hk2-api:jar:2.2.0:compile - omitted for duplicate)
[INFO] |  |  +- (org.glassfish.hk2.external:javax.inject:jar:2.2.0:compile - omitted for duplicate)
[INFO] |  |  +- (org.glassfish.hk2:hk2-locator:jar:2.2.0:compile - omitted for duplicate)
[INFO] |  |  \- org.glassfish.hk2:osgi-resource-locator:jar:1.0.1:compile
[INFO] |  +- org.glassfish.jersey.core:jersey-client:jar:2.6:compile
[INFO] |  |  +- (org.glassfish.jersey.core:jersey-common:jar:2.6:compile - omitted for duplicate)
[INFO] |  |  +- (javax.ws.rs:javax.ws.rs-api:jar:2.0:compile - omitted for duplicate)
[INFO] |  |  +- (org.glassfish.hk2:hk2-api:jar:2.2.0:compile - omitted for duplicate)
[INFO] |  |  +- (org.glassfish.hk2.external:javax.inject:jar:2.2.0:compile - omitted for duplicate)
[INFO] |  |  \- (org.glassfish.hk2:hk2-locator:jar:2.2.0:compile - omitted for duplicate)
[INFO] |  +- javax.ws.rs:javax.ws.rs-api:jar:2.0:compile
[INFO] |  +- javax.annotation:javax.annotation-api:jar:1.2:compile
[INFO] |  +- org.glassfish.hk2:hk2-api:jar:2.2.0:compile
[INFO] |  |  +- org.glassfish.hk2:hk2-utils:jar:2.2.0:compile
[INFO] |  |  \- org.glassfish.hk2.external:aopalliance-repackaged:jar:2.2.0:compile
[INFO] |  +- org.glassfish.hk2.external:javax.inject:jar:2.2.0:compile
[INFO] |  +- org.glassfish.hk2:hk2-locator:jar:2.2.0:compile
[INFO] |  |  +- (org.glassfish.hk2.external:javax.inject:jar:2.2.0:compile - omitted for duplicate)
[INFO] |  |  +- (org.glassfish.hk2.external:aopalliance-repackaged:jar:2.2.0:compile - omitted for duplicate)
[INFO] |  |  +- (org.glassfish.hk2:hk2-api:jar:2.2.0:compile - omitted for duplicate)
[INFO] |  |  +- (org.glassfish.hk2:hk2-utils:jar:2.2.0:compile - omitted for duplicate)
[INFO] |  |  \- (org.javassist:javassist:jar:3.18.1-GA:compile - omitted for conflict with 3.15.0-GA)
[INFO] |  \- javax.validation:validation-api:jar:1.1.0.Final:compile
[INFO] +- com.sun.jersey.contribs:jersey-spring:jar:1.18.1:compile
[INFO] |  +- com.sun.jersey:jersey-servlet:jar:1.18.1:compile
[INFO] |  |  \- com.sun.jersey:jersey-server:jar:1.18.1:compile
[INFO] |  |     \- com.sun.jersey:jersey-core:jar:1.18.1:compile
[INFO] |  \- (org.springframework:spring-aop:jar:3.0.0.RC3:compile - omitted for duplicate)
[INFO] +- commons-dbcp:commons-dbcp:jar:1.3:compile
[INFO] |  \- commons-pool:commons-pool:jar:1.5.4:compile
[INFO] +- org.hibernate:hibernate-core:jar:4.0.1.Final:compile
[INFO] |  +- commons-collections:commons-collections:jar:3.2.1:compile
[INFO] |  +- antlr:antlr:jar:2.7.7:compile
[INFO] |  +- org.jboss.spec.javax.transaction:jboss-transaction-api_1.1_spec:jar:1.0.0.Final:compile
[INFO] |  +- dom4j:dom4j:jar:1.6.1:compile
[INFO] |  |  \- xml-apis:xml-apis:jar:1.0.b2:compile
[INFO] |  +- org.hibernate.javax.persistence:hibernate-jpa-2.0-api:jar:1.0.1.Final:compile
[INFO] |  +- org.jboss.logging:jboss-logging:jar:3.1.0.CR2:compile
[INFO] |  +- org.javassist:javassist:jar:3.15.0-GA:compile
[INFO] |  \- org.hibernate.common:hibernate-commons-annotations:jar:4.0.1.Final:compile
[INFO] |     \- (org.jboss.logging:jboss-logging:jar:3.1.0.CR2:compile - omitted for duplicate)
[INFO] +- cglib:cglib:jar:2.2.2:compile
[INFO] |  \- asm:asm:jar:3.3.1:compile
[INFO] +- mysql:mysql-connector-java:jar:5.1.22:compile
[INFO] +- org.hibernate:hibernate-validator:jar:4.2.0.Final:compile
[INFO] |  +- (javax.validation:validation-api:jar:1.0.0.GA:compile - omitted for conflict with 1.1.0.Final)
[INFO] |  \- (org.slf4j:slf4j-api:jar:1.6.1:compile - omitted for conflict with 1.7.5)
[INFO] +- com.sun.xml.bind:jaxb-xjc:jar:2.2.6:compile
[INFO] +- com.sun.xml.bind:jaxb-impl:jar:2.2.6:compile
[INFO] +- javax.xml.bind:jaxb-api:jar:2.2.6:compile
[INFO] +- javax.servlet:jstl:jar:1.2:compile
[INFO] +- org.apache.tomcat:jsp-api:jar:6.0.32:provided
[INFO] |  +- org.apache.tomcat:el-api:jar:6.0.32:provided
[INFO] |  \- org.apache.tomcat:servlet-api:jar:6.0.32:provided
[INFO] +- log4j:log4j:jar:1.2.15:compile
[INFO] |  \- javax.mail:mail:jar:1.4:compile
[INFO] |     \- javax.activation:activation:jar:1.1:compile
[INFO] +- org.slf4j:slf4j-api:jar:1.7.5:compile
[INFO] +- org.slf4j:slf4j-simple:jar:1.6.4:compile
[INFO] |  \- (org.slf4j:slf4j-api:jar:1.6.4:compile - omitted for conflict with 1.7.5)
[INFO] \- org.slf4j:slf4j-log4j12:jar:1.7.5:compile
[INFO]    +- (org.slf4j:slf4j-api:jar:1.7.5:compile - omitted for duplicate)
[INFO]    \- (log4j:log4j:jar:1.2.17:compile - omitted for conflict with 1.2.15)
[INFO] ------------------------------------------------------------------------
[INFO] BUILD SUCCESS
[INFO] ------------------------------------------------------------------------
[INFO] Total time: 6.667 s
[INFO] Finished at: 2014-03-12T14:37:46+01:00
[INFO] Final Memory: 9M/16M
[INFO] ------------------------------------------------------------------------

在此问题中标记为解决方案：IncompatibleClassChangeError: class ClassMetadataReadingVisitor has interface ClassVisitor as super class 如何检查依赖的 jar 和冲突？

【问题讨论】：

【参考方案1】：

这是一个依赖树。列表下方的内容是其父项的依赖项。

[INFO] +- org.springframework:spring-core:jar:4.0.2.RELEASE:compile
[INFO] |  \- commons-logging:commons-logging:jar:1.1.3:compile

Spring-core 依赖于 commons-logging。

[INFO] +- org.glassfish.jersey.core:jersey-server:jar:2.6:compile
[INFO] |  +- org.glassfish.jersey.core:jersey-common:jar:2.6:compile
[INFO] |  |  +- (javax.ws.rs:javax.ws.rs-api:jar:2.0:compile - omitted for duplicate)
[INFO] |  |  +- (javax.annotation:javax.annotation-api:jar:1.2:compile - omitted for duplicate)

Jersey-server 依赖于 jersey-common。 Jersey-common 依赖 rs-api 和 annotation-api 等。

【讨论】：

是否有任何官方文档页面可供我们参考以了解更多详细信息？我有一种类似的问题，我认为必须有所有可能性的详细文档，但我发现这个maven.apache.org/plugins/maven-dependency-plugin/examples/… 几乎相似。尽管您的答案本身就是完整的。【参考方案2】：

您链接到的答案说您应该寻找spring-core 和spring-asm 之间的版本冲突。

如果你在树中搜索这些库，你会发现包括spring-core 在内的大部分Spring 组件都是4.0.2.RELEASE，而spring-asm 是3.0.0.RC3。您还可以看到冒犯spring-asm 是以下***依赖项的传递依赖项：

[INFO] +- org.springframework:spring-aop:jar:3.0.0.RC3:compile

所以，现在你需要在pom.xml 中找到它并更正它的版本。

【讨论】：

下面这个是什么意思？ \n

code  [INFO] |  +- com.sun.jersey:jersey-servlet:jar:1.18.1:compile [INFO] |  |  \- com.sun.jersey:jersey-server:jar:1.18.1:compile [INFO] |  |     \- com.sun.jersey:jersey-core:jar:1.18.1:compile code

是否有省略依赖的负号？ @siddharth \- 符号表示此依赖项是为当前父项列出的最后一个兄弟项。所有其他人都有+-

以上是关于如何理解 Maven 依赖树的主要内容，如果未能解决你的问题，请参考以下文章

如果我在依赖关系树中看不到它，如何从 Maven 中排除它？

maven 查看依赖树结构

maven依赖树输出中的“+-”和“\-”有啥区别？

Maven Helper

maven优化依赖常用命令