The repository your project is searching on does not contain the artifact :
org.apache.xalan:xalan:jar:2.7.1
.
It only contains xalan:xalan:jar:2.7.1
.
If you run mvn -X compile
you'll see they are a dependency of:
[DEBUG] org.opensaml:opensaml:jar:2.2.3:compile
[DEBUG] commons-collections:commons-collections:jar:3.1:compile
[DEBUG] commons-lang:commons-lang:jar:2.1:compile
[DEBUG] velocity:velocity:jar:1.5:compile
[DEBUG] org.apache.xerces:xml-apis:jar:2.9.1:runtime
[DEBUG] org.apache.xerces:xercesImpl:jar:2.9.1:runtime
[DEBUG] org.apache.xerces:resolver:jar:2.9.1:runtime
[DEBUG] org.apache.xerces:serializer:jar:2.9.1:runtime
[DEBUG] org.apache.xalan:xalan:jar:2.7.1:runtime
If believe the person who wrote this code meant to exclude them:
<exclusion>
<groupId>xalan</groupId>
<artifactId>xalan</artifactId>
</exclusion>
<exclusion>
<groupId>xerces</groupId>
<artifactId>xml-apis</artifactId>
</exclusion>
But note that the <groupId>
is actually excluding a dependency that it's not really a dependency. You will need to change the above exclusions in the pom, by:
<exclusion>
<groupId>org.apache.xalan</groupId>
<artifactId>xalan</artifactId>
</exclusion>
<exclusion>
<groupId>org.apache.xerces</groupId>
<artifactId>xml-apis</artifactId>
</exclusion>
Follow the same pattern for other potential conflicting artifacts.