Add dependency analysis plugin.

CHANGELOG.md

@@ -7,6 +7,15 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 
 ## [unreleased]
 
+### Added
+
+- [Dependency analysis Gradle plugin](https://github.com/autonomousapps/dependency-analysis-gradle-plugin)
+- The `check` task now depends on the `buildHealth` task and will fail the build on health violations
+
+### Changed
+
+- Changed JSR-305 dependency from `implementation` to `api`
+
 ## [2.0.1] - 2023-12-23
 
 ### Added

build.gradle.kts

@@ -13,6 +13,7 @@ plugins {
     jacoco
     `maven-publish`
     signing
+    alias(libs.plugins.dependencyAnalysis)
     alias(libs.plugins.spotbugs)
     alias(libs.plugins.versions)
 }
@@ -33,8 +34,9 @@ java {
 }
 
 dependencies {
+    api(libs.jsr305)
+
     implementation(libs.cthingAnnots)
-    implementation(libs.jsr305)
 
     testImplementation(libs.junitApi)
     testImplementation(libs.junitParams)
@@ -68,6 +70,16 @@ jacoco {
     toolVersion = libs.versions.jacoco.get()
 }
 
+dependencyAnalysis {
+    issues {
+        all {
+            onAny {
+                severity("fail")
+            }
+        }
+    }
+}
+
 fun isNonStable(version: String): Boolean {
     val stableKeyword = listOf("RELEASE", "FINAL", "GA").any { version.uppercase().contains(it) }
     val regex = "^[0-9,.v-]+(-r)?$".toRegex()
@@ -99,6 +111,10 @@ tasks {
         }
     }
 
+    check {
+        dependsOn(buildHealth)
+    }
+
     spotbugsMain {
         reports.create("html").required = true
     }

gradle/libs.versions.toml

@@ -7,6 +7,7 @@ junit = "5.10.2"
 spotbugs = "4.8.3"
 
 [plugins]
+dependencyAnalysis = { id = "com.autonomousapps.dependency-analysis", version = "1.30.0" }
 spotbugs = { id = "com.github.spotbugs", version = "6.0.7" }
 versions = { id = "com.github.ben-manes.versions", version = "0.51.0" }