"Unable to build the complete dependency graph" when building & checking multi-module project

[seanf]

The check goal fails with "Could not find artifact" and "Unable to build the complete dependency graph. Could not resolve following dependencies" because my SNAPSHOT artifacts (eg org.zanata:security-common:jar:4.5.0-SNAPSHOT) don't exist in the remote Maven repository, just the Maven reactor.

I think the plugin should resolve artifacts from the reactor before trying Maven repositories (local or remote). Even if the repositories contain artifacts for the same SNAPSHOT, they may be the wrong artifacts.

Partial log (edited):

./run-clean.sh ./mvnw -e -V -T 1 -Dbuildtime.output.csv -Dbuildtime.output.csv.file=buildtime.csv clean install jxr:aggregate --batch-mode -Dstyle.color=never --update-snapshots -DstaticAnalysisCI -Dkotlin.compiler.incremental=false -DskipFuncTests -DskipArqTests -Dmaven.test.failure.ignore -Ddepcheck
...
[INFO] --- security-versions:1.0.6:check (default) @ parent ---
...
[INFO] --- security-versions:1.0.6:check (default) @ api ---
...
[INFO] --- security-versions:1.0.6:check (default) @ zanata-platform ---
[INFO] Analyzing the dependencies for org.zanata:build-tools
[INFO] Creating victim cache directory /home/jenkins/.victims
[INFO] Syncing with the victims repository (based on the atom feed)
[INFO] Downloading: https://github.com/victims/victims-cve-db/commits.atom
[INFO] Downloading: https://github.com/victims/victims-cve-db/archive/master.zip
[INFO] Analyzing the dependencies for org.zanata:parent
[INFO] Analyzing the dependencies for org.zanata:zanata-common-api
[INFO] Analyzing the dependencies for org.zanata:api
[INFO] Analyzing the dependencies for org.zanata:zanata-common-util
[INFO] Analyzing the dependencies for org.zanata:zanata-adapter-po
[INFO] Analyzing the dependencies for org.zanata:zanata-adapter-properties
[INFO] Analyzing the dependencies for org.zanata:zanata-adapter-xliff
[INFO] Analyzing the dependencies for org.zanata:zanata-adapter-glossary
[INFO] Analyzing the dependencies for org.zanata:common
[INFO] Analyzing the dependencies for org.zanata:stub-server
[INFO] Analyzing the dependencies for org.zanata:zanata-cli
[INFO] Downloading from : http://artifactory.example.com/artifactory/okapi-cloudbees-release/org/powermock/powermock-api-mockito/1.6.2/powermock-api-mockito-1.6.2.pom
[INFO] Downloading from : http://artifactory.example.com/artifactory/zanata-cloudbees-release/org/powermock/powermock-api-mockito/1.6.2/powermock-api-mockito-1.6.2.pom
[INFO] Downloading from : http://artifactory.example.com/artifactory/jboss-public-repository-group/org/powermock/powermock-api-mockito/1.6.2/powermock-api-mockito-1.6.2.pom
[INFO] Downloading from : http://artifactory.example.com/artifactory/sonatype-public/org/powermock/powermock-api-mockito/1.6.2/powermock-api-mockito-1.6.2.pom
...
[INFO] Downloading from : http://artifactory.example.com/artifactory/central/xerces/xercesImpl/2.8.0/xercesImpl-2.8.0.jar
[INFO] Downloaded from : http://artifactory.example.com/artifactory/central/xerces/xercesImpl/2.8.0/xercesImpl-2.8.0.jar (1.2 MB at 45 MB/s)
[INFO] Downloading from : http://artifactory.example.com/artifactory/zanata-cloudbees-snapshot/org/zanata/security-common/4.5.0-SNAPSHOT/security-common-4.5.0-SNAPSHOT.jar
[INFO] Downloading from : http://artifactory.example.com/artifactory/jboss-public-repository-group/org/zanata/security-common/4.5.0-SNAPSHOT/security-common-4.5.0-SNAPSHOT.jar
[INFO] Downloading from : http://artifactory.example.com/artifactory/sonatype-public/org/zanata/security-common/4.5.0-SNAPSHOT/security-common-4.5.0-SNAPSHOT.jar
[INFO] Downloading from : http://artifactory.example.com/artifactory/sonatype-snapshots/org/zanata/security-common/4.5.0-SNAPSHOT/security-common-4.5.0-SNAPSHOT.jar
[INFO] Downloading from : http://artifactory.example.com/artifactory/bodar/org/zanata/security-common/4.5.0-SNAPSHOT/security-common-4.5.0-SNAPSHOT.jar
[INFO] Downloading from : http://artifactory.example.com/artifactory/apache-snapshots/org/zanata/security-common/4.5.0-SNAPSHOT/security-common-4.5.0-SNAPSHOT.jar
[INFO] Downloading from : https://oss.sonatype.org/content/repositories/google-snapshots/org/zanata/security-common/4.5.0-SNAPSHOT/security-common-4.5.0-SNAPSHOT.jar
[ERROR] Unable to build the complete dependency graph.
...
[ERROR] Failed to execute goal com.redhat.victims.maven:security-versions:1.0.6:check (default) on project zanata-platform: Unable to build the complete dependency graph. Could not resolve following dependencies: [org.zanata:security-common:jar:4.5.0-SNAPSHOT (compile)]: Could not resolve dependencies for project org.zanata:zanata-model:jar:4.5.0-SNAPSHOT: Could not find artifact org.zanata:security-common:jar:4.5.0-SNAPSHOT in zanata-cloudbees-snapshot (http://artifactory.example.com/artifactory/zanata-cloudbees-snapshot/) -> [Help 1]
org.apache.maven.lifecycle.LifecycleExecutionException: Failed to execute goal com.redhat.victims.maven:security-versions:1.0.6:check (default) on project zanata-platform: Unable to build the complete dependency graph.
    at org.apache.maven.lifecycle.internal.MojoExecutor.execute (MojoExecutor.java:213)
    at org.apache.maven.lifecycle.internal.MojoExecutor.execute (MojoExecutor.java:154)
    at org.apache.maven.lifecycle.internal.MojoExecutor.execute (MojoExecutor.java:146)
    at org.apache.maven.lifecycle.internal.LifecycleModuleBuilder.buildProject (LifecycleModuleBuilder.java:117)
    at io.takari.maven.builder.smart.SmartBuilderImpl.buildProject (SmartBuilderImpl.java:334)
    at io.takari.maven.builder.smart.SmartBuilderImpl$ProjectBuildTask.run (SmartBuilderImpl.java:104)
    at java.util.concurrent.Executors$RunnableAdapter.call (Executors.java:511)
    at java.util.concurrent.FutureTask.run (FutureTask.java:266)
    at java.util.concurrent.ThreadPoolExecutor.runWorker (ThreadPoolExecutor.java:1149)
    at java.util.concurrent.ThreadPoolExecutor$Worker.run (ThreadPoolExecutor.java:624)
    at java.lang.Thread.run (Thread.java:748)
Caused by: org.apache.maven.plugin.MojoFailureException: Unable to build the complete dependency graph.
    at com.h3xstream.maven.SecurityVersionsCheck.execute (SecurityVersionsCheck.java:95)
    at org.apache.maven.plugin.DefaultBuildPluginManager.executeMojo (DefaultBuildPluginManager.java:137)
    at org.apache.maven.lifecycle.internal.MojoExecutor.execute (MojoExecutor.java:208)
    at org.apache.maven.lifecycle.internal.MojoExecutor.execute (MojoExecutor.java:154)
    at org.apache.maven.lifecycle.internal.MojoExecutor.execute (MojoExecutor.java:146)
    at org.apache.maven.lifecycle.internal.LifecycleModuleBuilder.buildProject (LifecycleModuleBuilder.java:117)
    at io.takari.maven.builder.smart.SmartBuilderImpl.buildProject (SmartBuilderImpl.java:334)
    at io.takari.maven.builder.smart.SmartBuilderImpl$ProjectBuildTask.run (SmartBuilderImpl.java:104)
    at java.util.concurrent.Executors$RunnableAdapter.call (Executors.java:511)
    at java.util.concurrent.FutureTask.run (FutureTask.java:266)
    at java.util.concurrent.ThreadPoolExecutor.runWorker (ThreadPoolExecutor.java:1149)
    at java.util.concurrent.ThreadPoolExecutor$Worker.run (ThreadPoolExecutor.java:624)
    at java.lang.Thread.run (Thread.java:748)
Caused by: org.apache.maven.shared.dependency.graph.DependencyGraphBuilderException: Could not resolve following dependencies: [org.zanata:security-common:jar:4.5.0-SNAPSHOT (compile)]
    at org.apache.maven.shared.dependency.graph.internal.Maven31DependencyGraphBuilder.resolveDependencies (Maven31DependencyGraphBuilder.java:133)
    at org.apache.maven.shared.dependency.graph.internal.Maven31DependencyGraphBuilder.buildDependencyGraph (Maven31DependencyGraphBuilder.java:113)
    at org.apache.maven.shared.dependency.graph.internal.DefaultDependencyGraphBuilder.buildDependencyGraph (DefaultDependencyGraphBuilder.java:91)
    at org.apache.maven.shared.dependency.graph.internal.DefaultDependencyGraphBuilder.buildDependencyGraph (DefaultDependencyGraphBuilder.java:66)
    at com.h3xstream.maven.SecurityVersionsCheck.execute (SecurityVersionsCheck.java:91)
    at org.apache.maven.plugin.DefaultBuildPluginManager.executeMojo (DefaultBuildPluginManager.java:137)
    at org.apache.maven.lifecycle.internal.MojoExecutor.execute (MojoExecutor.java:208)
    at org.apache.maven.lifecycle.internal.MojoExecutor.execute (MojoExecutor.java:154)
    at org.apache.maven.lifecycle.internal.MojoExecutor.execute (MojoExecutor.java:146)
    at org.apache.maven.lifecycle.internal.LifecycleModuleBuilder.buildProject (LifecycleModuleBuilder.java:117)
    at io.takari.maven.builder.smart.SmartBuilderImpl.buildProject (SmartBuilderImpl.java:334)
    at io.takari.maven.builder.smart.SmartBuilderImpl$ProjectBuildTask.run (SmartBuilderImpl.java:104)
    at java.util.concurrent.Executors$RunnableAdapter.call (Executors.java:511)
    at java.util.concurrent.FutureTask.run (FutureTask.java:266)
    at java.util.concurrent.ThreadPoolExecutor.runWorker (ThreadPoolExecutor.java:1149)
    at java.util.concurrent.ThreadPoolExecutor$Worker.run (ThreadPoolExecutor.java:624)
    at java.lang.Thread.run (Thread.java:748)
Caused by: org.apache.maven.project.DependencyResolutionException: Could not resolve dependencies for project org.zanata:zanata-model:jar:4.5.0-SNAPSHOT: Could not find artifact org.zanata:security-common:jar:4.5.0-SNAPSHOT in zanata-cloudbees-snapshot (http://artifactory.example.com/artifactory/zanata-cloudbees-snapshot/)
    at org.apache.maven.project.DefaultProjectDependenciesResolver.resolve (DefaultProjectDependenciesResolver.java:208)
    at org.apache.maven.shared.dependency.graph.internal.Maven31DependencyGraphBuilder.resolveDependencies (Maven31DependencyGraphBuilder.java:127)
    at org.apache.maven.shared.dependency.graph.internal.Maven31DependencyGraphBuilder.buildDependencyGraph (Maven31DependencyGraphBuilder.java:113)
    at org.apache.maven.shared.dependency.graph.internal.DefaultDependencyGraphBuilder.buildDependencyGraph (DefaultDependencyGraphBuilder.java:91)
    at org.apache.maven.shared.dependency.graph.internal.DefaultDependencyGraphBuilder.buildDependencyGraph (DefaultDependencyGraphBuilder.java:66)
    at com.h3xstream.maven.SecurityVersionsCheck.execute (SecurityVersionsCheck.java:91)
    at org.apache.maven.plugin.DefaultBuildPluginManager.executeMojo (DefaultBuildPluginManager.java:137)
    at org.apache.maven.lifecycle.internal.MojoExecutor.execute (MojoExecutor.java:208)
    at org.apache.maven.lifecycle.internal.MojoExecutor.execute (MojoExecutor.java:154)
    at org.apache.maven.lifecycle.internal.MojoExecutor.execute (MojoExecutor.java:146)
    at org.apache.maven.lifecycle.internal.LifecycleModuleBuilder.buildProject (LifecycleModuleBuilder.java:117)
    at io.takari.maven.builder.smart.SmartBuilderImpl.buildProject (SmartBuilderImpl.java:334)
    at io.takari.maven.builder.smart.SmartBuilderImpl$ProjectBuildTask.run (SmartBuilderImpl.java:104)
    at java.util.concurrent.Executors$RunnableAdapter.call (Executors.java:511)
    at java.util.concurrent.FutureTask.run (FutureTask.java:266)
    at java.util.concurrent.ThreadPoolExecutor.runWorker (ThreadPoolExecutor.java:1149)
    at java.util.concurrent.ThreadPoolExecutor$Worker.run (ThreadPoolExecutor.java:624)
    at java.lang.Thread.run (Thread.java:748)
Caused by: org.eclipse.aether.resolution.DependencyResolutionException: Could not find artifact org.zanata:security-common:jar:4.5.0-SNAPSHOT in zanata-cloudbees-snapshot (http://artifactory.example.com/artifactory/zanata-cloudbees-snapshot/)
    at org.eclipse.aether.internal.impl.DefaultRepositorySystem.resolveDependencies (DefaultRepositorySystem.java:355)
    at org.apache.maven.project.DefaultProjectDependenciesResolver.resolve (DefaultProjectDependenciesResolver.java:202)
    at org.apache.maven.shared.dependency.graph.internal.Maven31DependencyGraphBuilder.resolveDependencies (Maven31DependencyGraphBuilder.java:127)
    at org.apache.maven.shared.dependency.graph.internal.Maven31DependencyGraphBuilder.buildDependencyGraph (Maven31DependencyGraphBuilder.java:113)
    at org.apache.maven.shared.dependency.graph.internal.DefaultDependencyGraphBuilder.buildDependencyGraph (DefaultDependencyGraphBuilder.java:91)
    at org.apache.maven.shared.dependency.graph.internal.DefaultDependencyGraphBuilder.buildDependencyGraph (DefaultDependencyGraphBuilder.java:66)
    at com.h3xstream.maven.SecurityVersionsCheck.execute (SecurityVersionsCheck.java:91)
    at org.apache.maven.plugin.DefaultBuildPluginManager.executeMojo (DefaultBuildPluginManager.java:137)
    at org.apache.maven.lifecycle.internal.MojoExecutor.execute (MojoExecutor.java:208)
    at org.apache.maven.lifecycle.internal.MojoExecutor.execute (MojoExecutor.java:154)
    at org.apache.maven.lifecycle.internal.MojoExecutor.execute (MojoExecutor.java:146)
    at org.apache.maven.lifecycle.internal.LifecycleModuleBuilder.buildProject (LifecycleModuleBuilder.java:117)
    at io.takari.maven.builder.smart.SmartBuilderImpl.buildProject (SmartBuilderImpl.java:334)
    at io.takari.maven.builder.smart.SmartBuilderImpl$ProjectBuildTask.run (SmartBuilderImpl.java:104)
    at java.util.concurrent.Executors$RunnableAdapter.call (Executors.java:511)
    at java.util.concurrent.FutureTask.run (FutureTask.java:266)
    at java.util.concurrent.ThreadPoolExecutor.runWorker (ThreadPoolExecutor.java:1149)
    at java.util.concurrent.ThreadPoolExecutor$Worker.run (ThreadPoolExecutor.java:624)
    at java.lang.Thread.run (Thread.java:748)
Caused by: org.eclipse.aether.resolution.ArtifactResolutionException: Could not find artifact org.zanata:security-common:jar:4.5.0-SNAPSHOT in zanata-cloudbees-snapshot (http://artifactory.example.com/artifactory/zanata-cloudbees-snapshot/)
    at org.eclipse.aether.internal.impl.DefaultArtifactResolver.resolve (DefaultArtifactResolver.java:422)
    at org.eclipse.aether.internal.impl.DefaultArtifactResolver.resolveArtifacts (DefaultArtifactResolver.java:224)
    at org.eclipse.aether.internal.impl.DefaultRepositorySystem.resolveDependencies (DefaultRepositorySystem.java:338)
    at org.apache.maven.project.DefaultProjectDependenciesResolver.resolve (DefaultProjectDependenciesResolver.java:202)
    at org.apache.maven.shared.dependency.graph.internal.Maven31DependencyGraphBuilder.resolveDependencies (Maven31DependencyGraphBuilder.java:127)
    at org.apache.maven.shared.dependency.graph.internal.Maven31DependencyGraphBuilder.buildDependencyGraph (Maven31DependencyGraphBuilder.java:113)
    at org.apache.maven.shared.dependency.graph.internal.DefaultDependencyGraphBuilder.buildDependencyGraph (DefaultDependencyGraphBuilder.java:91)
    at org.apache.maven.shared.dependency.graph.internal.DefaultDependencyGraphBuilder.buildDependencyGraph (DefaultDependencyGraphBuilder.java:66)
    at com.h3xstream.maven.SecurityVersionsCheck.execute (SecurityVersionsCheck.java:91)
    at org.apache.maven.plugin.DefaultBuildPluginManager.executeMojo (DefaultBuildPluginManager.java:137)
    at org.apache.maven.lifecycle.internal.MojoExecutor.execute (MojoExecutor.java:208)
    at org.apache.maven.lifecycle.internal.MojoExecutor.execute (MojoExecutor.java:154)
    at org.apache.maven.lifecycle.internal.MojoExecutor.execute (MojoExecutor.java:146)
    at org.apache.maven.lifecycle.internal.LifecycleModuleBuilder.buildProject (LifecycleModuleBuilder.java:117)
    at io.takari.maven.builder.smart.SmartBuilderImpl.buildProject (SmartBuilderImpl.java:334)
    at io.takari.maven.builder.smart.SmartBuilderImpl$ProjectBuildTask.run (SmartBuilderImpl.java:104)
    at java.util.concurrent.Executors$RunnableAdapter.call (Executors.java:511)
    at java.util.concurrent.FutureTask.run (FutureTask.java:266)
    at java.util.concurrent.ThreadPoolExecutor.runWorker (ThreadPoolExecutor.java:1149)
    at java.util.concurrent.ThreadPoolExecutor$Worker.run (ThreadPoolExecutor.java:624)
    at java.lang.Thread.run (Thread.java:748)
Caused by: org.eclipse.aether.transfer.ArtifactNotFoundException: Could not find artifact org.zanata:security-common:jar:4.5.0-SNAPSHOT in zanata-cloudbees-snapshot (http://artifactory.example.com/artifactory/zanata-cloudbees-snapshot/)
    at io.takari.aether.connector.AetherRepositoryConnector$2.wrap (AetherRepositoryConnector.java:893)
    at io.takari.aether.connector.AetherRepositoryConnector$2.wrap (AetherRepositoryConnector.java:1)
    at io.takari.aether.connector.AetherRepositoryConnector$GetTask.flush (AetherRepositoryConnector.java:673)
    at io.takari.aether.connector.AetherRepositoryConnector.get (AetherRepositoryConnector.java:310)
    at org.eclipse.aether.internal.impl.DefaultArtifactResolver.performDownloads (DefaultArtifactResolver.java:498)
    at org.eclipse.aether.internal.impl.DefaultArtifactResolver.resolve (DefaultArtifactResolver.java:399)
    at org.eclipse.aether.internal.impl.DefaultArtifactResolver.resolveArtifacts (DefaultArtifactResolver.java:224)
    at org.eclipse.aether.internal.impl.DefaultRepositorySystem.resolveDependencies (DefaultRepositorySystem.java:338)
    at org.apache.maven.project.DefaultProjectDependenciesResolver.resolve (DefaultProjectDependenciesResolver.java:202)
    at org.apache.maven.shared.dependency.graph.internal.Maven31DependencyGraphBuilder.resolveDependencies (Maven31DependencyGraphBuilder.java:127)
    at org.apache.maven.shared.dependency.graph.internal.Maven31DependencyGraphBuilder.buildDependencyGraph (Maven31DependencyGraphBuilder.java:113)
    at org.apache.maven.shared.dependency.graph.internal.DefaultDependencyGraphBuilder.buildDependencyGraph (DefaultDependencyGraphBuilder.java:91)
    at org.apache.maven.shared.dependency.graph.internal.DefaultDependencyGraphBuilder.buildDependencyGraph (DefaultDependencyGraphBuilder.java:66)
    at com.h3xstream.maven.SecurityVersionsCheck.execute (SecurityVersionsCheck.java:91)
    at org.apache.maven.plugin.DefaultBuildPluginManager.executeMojo (DefaultBuildPluginManager.java:137)
    at org.apache.maven.lifecycle.internal.MojoExecutor.execute (MojoExecutor.java:208)
    at org.apache.maven.lifecycle.internal.MojoExecutor.execute (MojoExecutor.java:154)
    at org.apache.maven.lifecycle.internal.MojoExecutor.execute (MojoExecutor.java:146)
    at org.apache.maven.lifecycle.internal.LifecycleModuleBuilder.buildProject (LifecycleModuleBuilder.java:117)
    at io.takari.maven.builder.smart.SmartBuilderImpl.buildProject (SmartBuilderImpl.java:334)
    at io.takari.maven.builder.smart.SmartBuilderImpl$ProjectBuildTask.run (SmartBuilderImpl.java:104)
    at java.util.concurrent.Executors$RunnableAdapter.call (Executors.java:511)
    at java.util.concurrent.FutureTask.run (FutureTask.java:266)
    at java.util.concurrent.ThreadPoolExecutor.runWorker (ThreadPoolExecutor.java:1149)
    at java.util.concurrent.ThreadPoolExecutor$Worker.run (ThreadPoolExecutor.java:624)
    at java.lang.Thread.run (Thread.java:748)

[seanf]

I'm using this configuration in the parent pom (with security-versions:check bound to verify phase), but for some reason security-versions:check seems to be running before most of the modules have been built or compiled.

    <profile>
      <id>dependency-check</id>
      <activation>
        <property>
          <name>depcheck</name>
        </property>
      </activation>
      <build>
        <plugins>
          <plugin>
            <groupId>com.redhat.victims.maven</groupId>
            <artifactId>security-versions</artifactId>
            <version>1.0.6</version>
            <executions>
              <execution>
                <phase>verify</phase>
                <goals>
                  <goal>check</goal>
                </goals>
              </execution>
            </executions>
          </plugin>
        </plugins>
      </build>
    </profile>

This is the reactor summary from the log:

[INFO] ------------------------------------------------------------------------
[INFO] Reactor Summary:
[INFO] 
[INFO] Build Tools ........................................ SUCCESS [  0.281 s]
[INFO] Zanata Parent POM .................................. SUCCESS [  0.174 s]
[INFO] Zanata API modules ................................. SUCCESS [  0.004 s]
[INFO] Zanata Common API .................................. SUCCESS [  0.048 s]
[INFO] Zanata common modules .............................. SUCCESS [  0.004 s]
[INFO] Zanata Common Utility Code ......................... SKIPPED
[INFO] Zanata Adapter for Gettext PO ...................... SKIPPED
[INFO] Zanata Adapter for Java Properties ................. SKIPPED
[INFO] Zanata Adapter for XLIFF file ...................... SKIPPED
[INFO] Zanata Adapter for Glossary ........................ SKIPPED
[INFO] Zanata client modules .............................. SUCCESS [  0.004 s]
[INFO] stub-server ........................................ SKIPPED
[INFO] Zanata Rest client ................................. SKIPPED
[INFO] Zanata client commands ............................. SKIPPED
[INFO] Zanata command-line client ......................... SKIPPED
[INFO] Zanata Maven Plugin ................................ SKIPPED
[INFO] Zanata server modules .............................. SKIPPED
[INFO] zanata-liquibase ................................... SKIPPED
[INFO] security-common .................................... SKIPPED
[INFO] Zanata model ....................................... SKIPPED
[INFO] Zanata Model Test .................................. SKIPPED
[INFO] Zanata frontend .................................... SKIPPED
[INFO] gwt-shared ......................................... SKIPPED
[INFO] gwt-test ........................................... SKIPPED
[INFO] Zanata Services .................................... SKIPPED
[INFO] gwt-editor ......................................... SKIPPED
[INFO] Zanata web application ............................. SKIPPED
[INFO] zanata-test-war .................................... SKIPPED
[INFO] functional-test .................................... SKIPPED
[INFO] Zanata Platform 4.5.0-SNAPSHOT ..................... FAILURE [  2.217 s]
[INFO] ------------------------------------------------------------------------
[INFO] BUILD FAILURE
[INFO] ------------------------------------------------------------------------
[INFO] Total time: 36.472 s
[INFO] Finished at: 2018-04-05T14:12:04Z
[INFO] ------------------------------------------------------------------------

I wouldn't expect security-versions:check to run (in zanata-platform) until after all other modules have been built. Perhaps there is a problem with this logic:

maven-security-versions/src/main/java/com/h3xstream/maven/SecurityVersionsCheck.java

Lines 62 to 69 in 9035936

	//Only execute this mojo once, on the very last project in the reactor
	if(reactorProjects != null) {
	final int size = reactorProjects.size();
	MavenProject lastProject = (MavenProject) reactorProjects.get(size - 1);
	if (lastProject != getProject()) {
	return;
	}
	}