Re: 9.5: coping with loss of ditaa.jar

[Jarmo Hurri]

Greetings Tim.

Tim Cross <theophilusx@gmail.com> writes:

> I think you missed one obvious solution - donwload the jar file from
> the ditaa project homepage on sourceforge.

> Another alternative which I just found is the ditaa version on github,
> which has SVG support. See https://github.com/stathissideris/ditaa. If
> you click on the 'release' link on the right, there is the most recent
> release, which includes a link to a standalone ditaa.jar file.

Ok, so at least two different standalone versions seem to be available:

1. via "project page" on sourceforge; looking inside the downloaded zip,
   this seems to be version 0.9

2. via developer github page, version 0.11.

On the github page there is a discussion indicating that a clojure
version will _not_ be forthcoming after all. The author also states that
(s)he is no longer interested in maintaining ditaa:

https://github.com/stathissideris/ditaa/issues/69

> I don't think you need to be paranoid about downloading the jar file
> from the project homepage - either you trust the code or you don't. If
> you don't trust the code, then even compiling it yourself adds no
> additional protection.

Trying to avoid binaries from "weird" sources probably just adds a sense
of false security. Sometimes false security is the best you can get.

Have fun and stay safe,

Jarmo