Pitfalls working with jitpack

Pitfalls working with jitpack

If you work with java or the JVM a lot, you're probably familiar with build tools like maven, Gradle and the like. These are all backed by some variety of Central repository where the tools search for and retrieve dependencies usually such as Maven central. However, publishing artifacts to these repositories can be a bit of a pain, to say the least. Jitpack tries to solve this by hosting a public maven repository based on public git repositories off of popular source code hosting services.

How it works

It couldn't be easier, all you do is simply create a public project based off of Gradle, Maven, Sbt or Leiningen and Jitpack takes care of the rest. It builds the project on demand and automatically serves the artifact on demand[1].

Others can add the artifact as a dependency in their project by adding jitpack as a repository and adding the dependency. For example in Gradle,

allprojects {
	repositories {
		maven { url "https://jitpack.io" }

dependencies {
        compile 'com.gitlab.nishtahir:java-meme-generator:ef51352c1f'

Downloading a *.jar works like any other maven repo[1:1]

mvn dependency:get 

Pitfalls to watch out for

After using Jitpack for a while, I've had to deal with a few minor annoyances that I thought I'd share in hopes that it would save you time[1:2].

  1. Just because it's on GitHub, doesn't mean it's going to build

Jitpack only builds and serves the resulting artifact. It doesn't guarantee that the code is actually going build. If you're unable to locate an artifact, the build has probably failed.

The minute you have any problems with artifacts being served, the first place you should check is the Jitpack log for the build.

  1. Avoid using -SNAPSHOT builds.

The -SNAPSHOT version basically tells Jitpack that you want the latest commit on the master branch. However, it's just a ticking time bomb just waiting to go off. The build changes whenever the new commits are added and you never know what's going to be in there.

A better alternative is to always stick with release builds, or reference specific commit IDs.

That way you always know what's going to be in them. One might be concerned that the branch history may change along with commit IDs but as far as I can tell Jitpack doesn't delete archived copies and continues to serve them.

  1. Jitpack works with wrappers and will always use them if they are available.

This is true for maven wrappers[1:3] as well[1:4]. This pretty much means that you should do the same if you forget to upload the wrapper *.jar files, the project won't build. You should do the same in your CI setup to try to keep the build consistent.

  1. Keep your publish plugin up to date

This is true especially for the android-maven plugin if you are building with gradle. Gradle 2.14.1 doesn't play nicely with the recommended android-maven-gradle-plugin:1.3, however it does work with android-maven-gradle-plugin:1.4.1.

Footnotes and references

  1. As far as I could tell, it's an undocumented feature as at the time of writing. ↩︎ ↩︎ ↩︎ ↩︎ ↩︎

Subscribe to Another Dev's Two Cents

Don’t miss out on the latest issues. Sign up now to get access to the library of members-only issues.