search

facebookarchive / stetho

Stetho is a debug bridge for Android applications, enabling the powerful Chrome Developer Tools and much more.
http://facebook.github.io/stetho/
MIT License
12.66k stars 1.13k forks source link

commons-cli 1.2 EOL #637

Open eliasbagley opened 5 years ago

eliasbagley commented 5 years ago

Hey all - We have received notice from one of our team's running a scan on our dependency tree that commons-cli 1.2 has been EOL'd. Is there any chance to update this dependency to the latest version?

I'm not 100% sure, but I believe it was flagged by this tool https://www.blackducksoftware.com/

jasta commented 5 years ago

Do you mean update to the latest commons CLI 2 or do you mean to the latest in the 1.x series (1.4)? Updating to 1.4 should be an easy thing for your team to do and at runtime the stetho version would also be the 1.4 version you've selected given how Gradle does version conflict resolution. If you instead mean the non-backwards compatible CLI 2 this would be a tougher thing for us to evaluate. We'd need to look into performance, total transitive dependency cost, etc to make sure it fits well on mobile (a CLI library is unlikely to be a given that it fits well in that environment of course).