search

sky-uk / cqlmigrate

Cassandra schema migration library
BSD 3-Clause "New" or "Revised" License
46 stars 29 forks source link

Exclude log4j dependency from runtime and compile sources #107

Closed ola825 closed 2 years ago

ola825 commented 2 years ago

As per security vulnerability, log4j will be excluded from runtime and compile scope dependencies for both main and test dependencies in cqlmigrate.

adamdougal commented 2 years ago

Is this needed? From what I can see our only usages of log4j are in our tests, and they've all been updated to 2.16 by https://github.com/sky-uk/cqlmigrate/pull/106

Dependencies output:

Configuration on demand is an incubating feature.

> Task :dependencies

------------------------------------------------------------
Root project
------------------------------------------------------------

annotationProcessor - Annotation processors and their dependencies for source set 'main'.
No dependencies

api - API dependencies for source set 'main'. (n)
\--- com.datastax.oss:java-driver-core:4.11.1 (n)

apiElements - API elements for main. (n)
No dependencies

archives - Configuration for archive artifacts.
No dependencies

compile - Dependencies for source set 'main' (deprecated, use 'implementation' instead).
No dependencies

compileClasspath - Compile classpath for source set 'main'.
+--- com.datastax.oss:java-driver-core:4.11.1
|    +--- com.datastax.oss:native-protocol:1.5.0
|    +--- io.netty:netty-handler:4.1.60.Final
|    |    +--- io.netty:netty-common:4.1.60.Final
|    |    +--- io.netty:netty-resolver:4.1.60.Final
|    |    |    \--- io.netty:netty-common:4.1.60.Final
|    |    +--- io.netty:netty-buffer:4.1.60.Final
|    |    |    \--- io.netty:netty-common:4.1.60.Final
|    |    +--- io.netty:netty-transport:4.1.60.Final
|    |    |    +--- io.netty:netty-common:4.1.60.Final
|    |    |    +--- io.netty:netty-buffer:4.1.60.Final (*)
|    |    |    \--- io.netty:netty-resolver:4.1.60.Final (*)
|    |    \--- io.netty:netty-codec:4.1.60.Final
|    |         +--- io.netty:netty-common:4.1.60.Final
|    |         +--- io.netty:netty-buffer:4.1.60.Final (*)
|    |         \--- io.netty:netty-transport:4.1.60.Final (*)
|    +--- com.datastax.oss:java-driver-shaded-guava:25.1-jre-graal-sub-1
|    +--- com.typesafe:config:1.4.1
|    +--- com.github.jnr:jnr-posix:3.1.5
|    |    +--- com.github.jnr:jnr-ffi:2.2.2
|    |    |    +--- com.github.jnr:jffi:1.3.1
|    |    |    +--- org.ow2.asm:asm:9.1
|    |    |    +--- org.ow2.asm:asm-commons:9.1
|    |    |    |    +--- org.ow2.asm:asm:9.1
|    |    |    |    +--- org.ow2.asm:asm-tree:9.1
|    |    |    |    |    \--- org.ow2.asm:asm:9.1
|    |    |    |    \--- org.ow2.asm:asm-analysis:9.1
|    |    |    |         \--- org.ow2.asm:asm-tree:9.1 (*)
|    |    |    +--- org.ow2.asm:asm-analysis:9.1 (*)
|    |    |    +--- org.ow2.asm:asm-tree:9.1 (*)
|    |    |    +--- org.ow2.asm:asm-util:9.1
|    |    |    |    +--- org.ow2.asm:asm:9.1
|    |    |    |    +--- org.ow2.asm:asm-tree:9.1 (*)
|    |    |    |    \--- org.ow2.asm:asm-analysis:9.1 (*)
|    |    |    +--- com.github.jnr:jnr-a64asm:1.0.0
|    |    |    \--- com.github.jnr:jnr-x86asm:1.0.2
|    |    \--- com.github.jnr:jnr-constants:0.10.1
|    +--- org.slf4j:slf4j-api:1.7.26 -> 1.7.30
|    +--- io.dropwizard.metrics:metrics-core:4.1.18
|    |    \--- org.slf4j:slf4j-api:1.7.30
|    +--- org.hdrhistogram:HdrHistogram:2.1.12
|    +--- com.esri.geometry:esri-geometry-api:1.2.1
|    |    +--- org.json:json:20090211
|    |    \--- org.codehaus.jackson:jackson-core-asl:1.9.12
|    +--- com.fasterxml.jackson.core:jackson-core:2.12.2
|    +--- com.fasterxml.jackson.core:jackson-databind:2.12.2
|    |    +--- com.fasterxml.jackson.core:jackson-annotations:2.12.2
|    |    \--- com.fasterxml.jackson.core:jackson-core:2.12.2
|    +--- org.reactivestreams:reactive-streams:1.0.3
|    +--- com.github.stephenc.jcip:jcip-annotations:1.0-1
|    \--- com.github.spotbugs:spotbugs-annotations:3.1.12
|         \--- com.google.code.findbugs:jsr305:3.0.2
\--- org.slf4j:slf4j-api:1.7.25 -> 1.7.30

compileOnly - Compile only dependencies for source set 'main'.
No dependencies

default - Configuration for default artifacts.
+--- com.datastax.oss:java-driver-core:4.11.1
|    +--- com.datastax.oss:native-protocol:1.5.0
|    +--- io.netty:netty-handler:4.1.60.Final
|    |    +--- io.netty:netty-common:4.1.60.Final
|    |    +--- io.netty:netty-resolver:4.1.60.Final
|    |    |    \--- io.netty:netty-common:4.1.60.Final
|    |    +--- io.netty:netty-buffer:4.1.60.Final
|    |    |    \--- io.netty:netty-common:4.1.60.Final
|    |    +--- io.netty:netty-transport:4.1.60.Final
|    |    |    +--- io.netty:netty-common:4.1.60.Final
|    |    |    +--- io.netty:netty-buffer:4.1.60.Final (*)
|    |    |    \--- io.netty:netty-resolver:4.1.60.Final (*)
|    |    \--- io.netty:netty-codec:4.1.60.Final
|    |         +--- io.netty:netty-common:4.1.60.Final
|    |         +--- io.netty:netty-buffer:4.1.60.Final (*)
|    |         \--- io.netty:netty-transport:4.1.60.Final (*)
|    +--- com.datastax.oss:java-driver-shaded-guava:25.1-jre-graal-sub-1
|    +--- com.typesafe:config:1.4.1
|    +--- com.github.jnr:jnr-posix:3.1.5
|    |    +--- com.github.jnr:jnr-ffi:2.2.2
|    |    |    +--- com.github.jnr:jffi:1.3.1
|    |    |    +--- org.ow2.asm:asm:9.1
|    |    |    +--- org.ow2.asm:asm-commons:9.1
|    |    |    |    +--- org.ow2.asm:asm:9.1
|    |    |    |    +--- org.ow2.asm:asm-tree:9.1
|    |    |    |    |    \--- org.ow2.asm:asm:9.1
|    |    |    |    \--- org.ow2.asm:asm-analysis:9.1
|    |    |    |         \--- org.ow2.asm:asm-tree:9.1 (*)
|    |    |    +--- org.ow2.asm:asm-analysis:9.1 (*)
|    |    |    +--- org.ow2.asm:asm-tree:9.1 (*)
|    |    |    +--- org.ow2.asm:asm-util:9.1
|    |    |    |    +--- org.ow2.asm:asm:9.1
|    |    |    |    +--- org.ow2.asm:asm-tree:9.1 (*)
|    |    |    |    \--- org.ow2.asm:asm-analysis:9.1 (*)
|    |    |    +--- com.github.jnr:jnr-a64asm:1.0.0
|    |    |    \--- com.github.jnr:jnr-x86asm:1.0.2
|    |    \--- com.github.jnr:jnr-constants:0.10.1
|    +--- org.slf4j:slf4j-api:1.7.26 -> 1.7.30
|    +--- io.dropwizard.metrics:metrics-core:4.1.18
|    |    \--- org.slf4j:slf4j-api:1.7.30
|    +--- org.hdrhistogram:HdrHistogram:2.1.12
|    +--- com.esri.geometry:esri-geometry-api:1.2.1
|    |    +--- org.json:json:20090211
|    |    \--- org.codehaus.jackson:jackson-core-asl:1.9.12
|    +--- com.fasterxml.jackson.core:jackson-core:2.12.2
|    +--- com.fasterxml.jackson.core:jackson-databind:2.12.2
|    |    +--- com.fasterxml.jackson.core:jackson-annotations:2.12.2
|    |    \--- com.fasterxml.jackson.core:jackson-core:2.12.2
|    +--- org.reactivestreams:reactive-streams:1.0.3
|    +--- com.github.stephenc.jcip:jcip-annotations:1.0-1
|    \--- com.github.spotbugs:spotbugs-annotations:3.1.12
|         \--- com.google.code.findbugs:jsr305:3.0.2
\--- org.slf4j:slf4j-api:1.7.25 -> 1.7.30

functional
+--- org.slf4j:slf4j-simple:1.7.25
|    \--- org.slf4j:slf4j-api:1.7.25
\--- org.cassandraunit:cassandra-unit:4.3.1.0
     +--- junit:junit:4.12
     |    \--- org.hamcrest:hamcrest-core:1.3
     +--- org.apache.cassandra:cassandra-all:3.11.5
     |    +--- org.xerial.snappy:snappy-java:1.1.1.7
     |    +--- net.jpountz.lz4:lz4:1.3.0
     |    +--- com.ning:compress-lzf:0.8.4
     |    +--- com.google.guava:guava:18.0
     |    +--- commons-cli:commons-cli:1.1
     |    +--- commons-codec:commons-codec:1.9 -> 1.10
     |    +--- org.apache.commons:commons-lang3:3.1
     |    +--- org.apache.commons:commons-math3:3.2
     |    +--- com.googlecode.concurrentlinkedhashmap:concurrentlinkedhashmap-lru:1.4
     |    +--- org.antlr:antlr:3.5.2
     |    |    +--- org.antlr:antlr-runtime:3.5.2
     |    |    \--- org.antlr:ST4:4.0.8
     |    |         \--- org.antlr:antlr-runtime:3.5.2
     |    +--- org.antlr:antlr-runtime:3.5.2
     |    +--- org.slf4j:slf4j-api:1.7.7 -> 1.7.25
     |    +--- org.slf4j:jcl-over-slf4j:1.7.7
     |    |    \--- org.slf4j:slf4j-api:1.7.7 -> 1.7.25
     |    +--- org.codehaus.jackson:jackson-core-asl:1.9.2
     |    +--- org.codehaus.jackson:jackson-mapper-asl:1.9.2
     |    |    \--- org.codehaus.jackson:jackson-core-asl:1.9.2
     |    +--- com.googlecode.json-simple:json-simple:1.1
     |    +--- com.boundary:high-scale-lib:1.0.6
     |    +--- org.yaml:snakeyaml:1.11 -> 1.12
     |    +--- org.mindrot:jbcrypt:0.3m
     |    +--- io.airlift:airline:0.6
     |    |    +--- javax.inject:javax.inject:1
     |    |    \--- com.google.guava:guava:12.0 -> 18.0
     |    +--- io.dropwizard.metrics:metrics-core:3.1.5
     |    |    \--- org.slf4j:slf4j-api:1.7.7 -> 1.7.25
     |    +--- io.dropwizard.metrics:metrics-jvm:3.1.5
     |    |    +--- io.dropwizard.metrics:metrics-core:3.1.5 (*)
     |    |    \--- org.slf4j:slf4j-api:1.7.7 -> 1.7.25
     |    +--- com.addthis.metrics:reporter-config3:3.0.3
     |    |    +--- com.addthis.metrics:reporter-config-base:3.0.3
     |    |    |    +--- org.slf4j:slf4j-api:1.7.7 -> 1.7.25
     |    |    |    +--- org.yaml:snakeyaml:1.12
     |    |    |    +--- org.hibernate:hibernate-validator:4.3.0.Final
     |    |    |    |    +--- javax.validation:validation-api:1.0.0.GA
     |    |    |    |    \--- org.jboss.logging:jboss-logging:3.1.0.CR2
     |    |    |    \--- org.apache.commons:commons-lang3:3.1
     |    |    +--- io.dropwizard.metrics:metrics-core:3.1.0 -> 3.1.5 (*)
     |    |    +--- org.slf4j:slf4j-api:1.7.7 -> 1.7.25
     |    |    +--- org.yaml:snakeyaml:1.12
     |    |    +--- org.hibernate:hibernate-validator:4.3.0.Final (*)
     |    |    \--- org.apache.commons:commons-lang3:3.1
     |    +--- com.thinkaurelius.thrift:thrift-server:0.3.7
     |    |    +--- com.lmax:disruptor:3.0.1
     |    |    \--- org.slf4j:slf4j-api:1.6.1 -> 1.7.25
     |    +--- com.clearspring.analytics:stream:2.5.2
     |    |    \--- it.unimi.dsi:fastutil:6.5.7
     |    +--- ch.qos.logback:logback-core:1.1.3
     |    +--- ch.qos.logback:logback-classic:1.1.3
     |    |    +--- ch.qos.logback:logback-core:1.1.3
     |    |    \--- org.slf4j:slf4j-api:1.7.7 -> 1.7.25
     |    +--- org.apache.cassandra:cassandra-thrift:3.11.5
     |    |    +--- org.apache.commons:commons-lang3:3.1
     |    |    +--- org.slf4j:slf4j-api:1.7.7 -> 1.7.25
     |    |    +--- org.slf4j:jcl-over-slf4j:1.7.7 (*)
     |    |    +--- com.carrotsearch:hppc:0.5.4
     |    |    +--- de.jflex:jflex:1.6.0
     |    |    |    \--- org.apache.ant:ant:1.7.0
     |    |    |         \--- org.apache.ant:ant-launcher:1.7.0
     |    |    +--- com.github.rholder:snowball-stemmer:1.3.0.581.1
     |    |    \--- com.googlecode.concurrent-trees:concurrent-trees:2.4.0
     |    +--- com.github.jbellis:jamm:0.3.0
     |    +--- joda-time:joda-time:2.4
     |    +--- org.fusesource:sigar:1.6.4
     |    +--- org.eclipse.jdt.core.compiler:ecj:4.4.2
     |    +--- org.caffinitas.ohc:ohc-core:0.4.4
     |    |    +--- org.slf4j:slf4j-api:1.7.12 -> 1.7.25
     |    |    \--- com.google.guava:guava:16.0 -> 18.0
     |    +--- org.caffinitas.ohc:ohc-core-j8:0.4.4
     |    |    \--- org.caffinitas.ohc:ohc-core:0.4.4 (*)
     |    +--- com.github.ben-manes.caffeine:caffeine:2.2.6
     |    +--- org.jctools:jctools-core:1.2.1
     |    \--- org.ow2.asm:asm:5.0.4
     +--- org.apache.thrift:libthrift:0.12.0
     |    +--- org.slf4j:slf4j-api:1.7.25
     |    +--- org.apache.httpcomponents:httpclient:4.5.6
     |    |    +--- org.apache.httpcomponents:httpcore:4.4.10
     |    |    +--- commons-logging:commons-logging:1.2
     |    |    \--- commons-codec:commons-codec:1.10
     |    \--- org.apache.httpcomponents:httpcore:4.4.1 -> 4.4.10
     +--- net.java.dev.jna:jna:4.1.0
     +--- org.hamcrest:hamcrest-core:1.3
     \--- org.hamcrest:hamcrest-library:1.3
          \--- org.hamcrest:hamcrest-core:1.3

implementation - Implementation only dependencies for source set 'main'. (n)
\--- org.slf4j:slf4j-api:1.7.25 (n)

runtime - Runtime dependencies for source set 'main' (deprecated, use 'runtimeOnly' instead).
No dependencies

runtimeClasspath - Runtime classpath of source set 'main'.
+--- com.datastax.oss:java-driver-core:4.11.1
|    +--- com.datastax.oss:native-protocol:1.5.0
|    +--- io.netty:netty-handler:4.1.60.Final
|    |    +--- io.netty:netty-common:4.1.60.Final
|    |    +--- io.netty:netty-resolver:4.1.60.Final
|    |    |    \--- io.netty:netty-common:4.1.60.Final
|    |    +--- io.netty:netty-buffer:4.1.60.Final
|    |    |    \--- io.netty:netty-common:4.1.60.Final
|    |    +--- io.netty:netty-transport:4.1.60.Final
|    |    |    +--- io.netty:netty-common:4.1.60.Final
|    |    |    +--- io.netty:netty-buffer:4.1.60.Final (*)
|    |    |    \--- io.netty:netty-resolver:4.1.60.Final (*)
|    |    \--- io.netty:netty-codec:4.1.60.Final
|    |         +--- io.netty:netty-common:4.1.60.Final
|    |         +--- io.netty:netty-buffer:4.1.60.Final (*)
|    |         \--- io.netty:netty-transport:4.1.60.Final (*)
|    +--- com.datastax.oss:java-driver-shaded-guava:25.1-jre-graal-sub-1
|    +--- com.typesafe:config:1.4.1
|    +--- com.github.jnr:jnr-posix:3.1.5
|    |    +--- com.github.jnr:jnr-ffi:2.2.2
|    |    |    +--- com.github.jnr:jffi:1.3.1
|    |    |    +--- org.ow2.asm:asm:9.1
|    |    |    +--- org.ow2.asm:asm-commons:9.1
|    |    |    |    +--- org.ow2.asm:asm:9.1
|    |    |    |    +--- org.ow2.asm:asm-tree:9.1
|    |    |    |    |    \--- org.ow2.asm:asm:9.1
|    |    |    |    \--- org.ow2.asm:asm-analysis:9.1
|    |    |    |         \--- org.ow2.asm:asm-tree:9.1 (*)
|    |    |    +--- org.ow2.asm:asm-analysis:9.1 (*)
|    |    |    +--- org.ow2.asm:asm-tree:9.1 (*)
|    |    |    +--- org.ow2.asm:asm-util:9.1
|    |    |    |    +--- org.ow2.asm:asm:9.1
|    |    |    |    +--- org.ow2.asm:asm-tree:9.1 (*)
|    |    |    |    \--- org.ow2.asm:asm-analysis:9.1 (*)
|    |    |    +--- com.github.jnr:jnr-a64asm:1.0.0
|    |    |    \--- com.github.jnr:jnr-x86asm:1.0.2
|    |    \--- com.github.jnr:jnr-constants:0.10.1
|    +--- org.slf4j:slf4j-api:1.7.26 -> 1.7.30
|    +--- io.dropwizard.metrics:metrics-core:4.1.18
|    |    \--- org.slf4j:slf4j-api:1.7.30
|    +--- org.hdrhistogram:HdrHistogram:2.1.12
|    +--- com.esri.geometry:esri-geometry-api:1.2.1
|    |    +--- org.json:json:20090211
|    |    \--- org.codehaus.jackson:jackson-core-asl:1.9.12
|    +--- com.fasterxml.jackson.core:jackson-core:2.12.2
|    +--- com.fasterxml.jackson.core:jackson-databind:2.12.2
|    |    +--- com.fasterxml.jackson.core:jackson-annotations:2.12.2
|    |    \--- com.fasterxml.jackson.core:jackson-core:2.12.2
|    +--- org.reactivestreams:reactive-streams:1.0.3
|    +--- com.github.stephenc.jcip:jcip-annotations:1.0-1
|    \--- com.github.spotbugs:spotbugs-annotations:3.1.12
|         \--- com.google.code.findbugs:jsr305:3.0.2
\--- org.slf4j:slf4j-api:1.7.25 -> 1.7.30

runtimeElements - Elements of runtime for main. (n)
No dependencies

runtimeOnly - Runtime only dependencies for source set 'main'. (n)
No dependencies

shadow
No dependencies

signatures
No dependencies

testAnnotationProcessor - Annotation processors and their dependencies for source set 'test'.
No dependencies

testCompile - Dependencies for source set 'test' (deprecated, use 'testImplementation' instead).
\--- org.cassandraunit:cassandra-unit:4.3.1.0
     +--- junit:junit:4.12
     |    \--- org.hamcrest:hamcrest-core:1.3
     +--- org.apache.cassandra:cassandra-all:3.11.5
     |    +--- org.xerial.snappy:snappy-java:1.1.1.7
     |    +--- net.jpountz.lz4:lz4:1.3.0
     |    +--- com.ning:compress-lzf:0.8.4
     |    +--- com.google.guava:guava:18.0
     |    +--- commons-cli:commons-cli:1.1
     |    +--- commons-codec:commons-codec:1.9 -> 1.10
     |    +--- org.apache.commons:commons-lang3:3.1
     |    +--- org.apache.commons:commons-math3:3.2
     |    +--- com.googlecode.concurrentlinkedhashmap:concurrentlinkedhashmap-lru:1.4
     |    +--- org.antlr:antlr:3.5.2
     |    |    +--- org.antlr:antlr-runtime:3.5.2
     |    |    \--- org.antlr:ST4:4.0.8
     |    |         \--- org.antlr:antlr-runtime:3.5.2
     |    +--- org.antlr:antlr-runtime:3.5.2
     |    +--- org.slf4j:slf4j-api:1.7.7 -> 1.7.25
     |    +--- org.slf4j:jcl-over-slf4j:1.7.7
     |    |    \--- org.slf4j:slf4j-api:1.7.7 -> 1.7.25
     |    +--- org.codehaus.jackson:jackson-core-asl:1.9.2
     |    +--- org.codehaus.jackson:jackson-mapper-asl:1.9.2
     |    |    \--- org.codehaus.jackson:jackson-core-asl:1.9.2
     |    +--- com.googlecode.json-simple:json-simple:1.1
     |    +--- com.boundary:high-scale-lib:1.0.6
     |    +--- org.yaml:snakeyaml:1.11 -> 1.12
     |    +--- org.mindrot:jbcrypt:0.3m
     |    +--- io.airlift:airline:0.6
     |    |    +--- javax.inject:javax.inject:1
     |    |    \--- com.google.guava:guava:12.0 -> 18.0
     |    +--- io.dropwizard.metrics:metrics-core:3.1.5
     |    |    \--- org.slf4j:slf4j-api:1.7.7 -> 1.7.25
     |    +--- io.dropwizard.metrics:metrics-jvm:3.1.5
     |    |    +--- io.dropwizard.metrics:metrics-core:3.1.5 (*)
     |    |    \--- org.slf4j:slf4j-api:1.7.7 -> 1.7.25
     |    +--- com.addthis.metrics:reporter-config3:3.0.3
     |    |    +--- com.addthis.metrics:reporter-config-base:3.0.3
     |    |    |    +--- org.slf4j:slf4j-api:1.7.7 -> 1.7.25
     |    |    |    +--- org.yaml:snakeyaml:1.12
     |    |    |    +--- org.hibernate:hibernate-validator:4.3.0.Final
     |    |    |    |    +--- javax.validation:validation-api:1.0.0.GA
     |    |    |    |    \--- org.jboss.logging:jboss-logging:3.1.0.CR2
     |    |    |    \--- org.apache.commons:commons-lang3:3.1
     |    |    +--- io.dropwizard.metrics:metrics-core:3.1.0 -> 3.1.5 (*)
     |    |    +--- org.slf4j:slf4j-api:1.7.7 -> 1.7.25
     |    |    +--- org.yaml:snakeyaml:1.12
     |    |    +--- org.hibernate:hibernate-validator:4.3.0.Final (*)
     |    |    \--- org.apache.commons:commons-lang3:3.1
     |    +--- com.thinkaurelius.thrift:thrift-server:0.3.7
     |    |    +--- com.lmax:disruptor:3.0.1
     |    |    \--- org.slf4j:slf4j-api:1.6.1 -> 1.7.25
     |    +--- com.clearspring.analytics:stream:2.5.2
     |    |    \--- it.unimi.dsi:fastutil:6.5.7
     |    +--- ch.qos.logback:logback-core:1.1.3
     |    +--- ch.qos.logback:logback-classic:1.1.3
     |    |    +--- ch.qos.logback:logback-core:1.1.3
     |    |    \--- org.slf4j:slf4j-api:1.7.7 -> 1.7.25
     |    +--- org.apache.cassandra:cassandra-thrift:3.11.5
     |    |    +--- org.apache.commons:commons-lang3:3.1
     |    |    +--- org.slf4j:slf4j-api:1.7.7 -> 1.7.25
     |    |    +--- org.slf4j:jcl-over-slf4j:1.7.7 (*)
     |    |    +--- com.carrotsearch:hppc:0.5.4
     |    |    +--- de.jflex:jflex:1.6.0
     |    |    |    \--- org.apache.ant:ant:1.7.0
     |    |    |         \--- org.apache.ant:ant-launcher:1.7.0
     |    |    +--- com.github.rholder:snowball-stemmer:1.3.0.581.1
     |    |    \--- com.googlecode.concurrent-trees:concurrent-trees:2.4.0
     |    +--- com.github.jbellis:jamm:0.3.0
     |    +--- joda-time:joda-time:2.4
     |    +--- org.fusesource:sigar:1.6.4
     |    +--- org.eclipse.jdt.core.compiler:ecj:4.4.2
     |    +--- org.caffinitas.ohc:ohc-core:0.4.4
     |    |    +--- org.slf4j:slf4j-api:1.7.12 -> 1.7.25
     |    |    \--- com.google.guava:guava:16.0 -> 18.0
     |    +--- org.caffinitas.ohc:ohc-core-j8:0.4.4
     |    |    \--- org.caffinitas.ohc:ohc-core:0.4.4 (*)
     |    +--- com.github.ben-manes.caffeine:caffeine:2.2.6
     |    +--- org.jctools:jctools-core:1.2.1
     |    \--- org.ow2.asm:asm:5.0.4
     +--- org.apache.thrift:libthrift:0.12.0
     |    +--- org.slf4j:slf4j-api:1.7.25
     |    +--- org.apache.httpcomponents:httpclient:4.5.6
     |    |    +--- org.apache.httpcomponents:httpcore:4.4.10
     |    |    +--- commons-logging:commons-logging:1.2
     |    |    \--- commons-codec:commons-codec:1.10
     |    \--- org.apache.httpcomponents:httpcore:4.4.1 -> 4.4.10
     +--- net.java.dev.jna:jna:4.1.0
     +--- org.hamcrest:hamcrest-core:1.3
     \--- org.hamcrest:hamcrest-library:1.3
          \--- org.hamcrest:hamcrest-core:1.3

testCompileAndFunctional
\--- org.cassandraunit:cassandra-unit:4.3.1.0
     +--- junit:junit:4.12
     |    \--- org.hamcrest:hamcrest-core:1.3
     +--- org.apache.cassandra:cassandra-all:3.11.5
     |    +--- org.xerial.snappy:snappy-java:1.1.1.7
     |    +--- net.jpountz.lz4:lz4:1.3.0
     |    +--- com.ning:compress-lzf:0.8.4
     |    +--- com.google.guava:guava:18.0
     |    +--- commons-cli:commons-cli:1.1
     |    +--- commons-codec:commons-codec:1.9 -> 1.10
     |    +--- org.apache.commons:commons-lang3:3.1
     |    +--- org.apache.commons:commons-math3:3.2
     |    +--- com.googlecode.concurrentlinkedhashmap:concurrentlinkedhashmap-lru:1.4
     |    +--- org.antlr:antlr:3.5.2
     |    |    +--- org.antlr:antlr-runtime:3.5.2
     |    |    \--- org.antlr:ST4:4.0.8
     |    |         \--- org.antlr:antlr-runtime:3.5.2
     |    +--- org.antlr:antlr-runtime:3.5.2
     |    +--- org.slf4j:slf4j-api:1.7.7 -> 1.7.25
     |    +--- org.slf4j:jcl-over-slf4j:1.7.7
     |    |    \--- org.slf4j:slf4j-api:1.7.7 -> 1.7.25
     |    +--- org.codehaus.jackson:jackson-core-asl:1.9.2
     |    +--- org.codehaus.jackson:jackson-mapper-asl:1.9.2
     |    |    \--- org.codehaus.jackson:jackson-core-asl:1.9.2
     |    +--- com.googlecode.json-simple:json-simple:1.1
     |    +--- com.boundary:high-scale-lib:1.0.6
     |    +--- org.yaml:snakeyaml:1.11 -> 1.12
     |    +--- org.mindrot:jbcrypt:0.3m
     |    +--- io.airlift:airline:0.6
     |    |    +--- javax.inject:javax.inject:1
     |    |    \--- com.google.guava:guava:12.0 -> 18.0
     |    +--- io.dropwizard.metrics:metrics-core:3.1.5
     |    |    \--- org.slf4j:slf4j-api:1.7.7 -> 1.7.25
     |    +--- io.dropwizard.metrics:metrics-jvm:3.1.5
     |    |    +--- io.dropwizard.metrics:metrics-core:3.1.5 (*)
     |    |    \--- org.slf4j:slf4j-api:1.7.7 -> 1.7.25
     |    +--- com.addthis.metrics:reporter-config3:3.0.3
     |    |    +--- com.addthis.metrics:reporter-config-base:3.0.3
     |    |    |    +--- org.slf4j:slf4j-api:1.7.7 -> 1.7.25
     |    |    |    +--- org.yaml:snakeyaml:1.12
     |    |    |    +--- org.hibernate:hibernate-validator:4.3.0.Final
     |    |    |    |    +--- javax.validation:validation-api:1.0.0.GA
     |    |    |    |    \--- org.jboss.logging:jboss-logging:3.1.0.CR2
     |    |    |    \--- org.apache.commons:commons-lang3:3.1
     |    |    +--- io.dropwizard.metrics:metrics-core:3.1.0 -> 3.1.5 (*)
     |    |    +--- org.slf4j:slf4j-api:1.7.7 -> 1.7.25
     |    |    +--- org.yaml:snakeyaml:1.12
     |    |    +--- org.hibernate:hibernate-validator:4.3.0.Final (*)
     |    |    \--- org.apache.commons:commons-lang3:3.1
     |    +--- com.thinkaurelius.thrift:thrift-server:0.3.7
     |    |    +--- com.lmax:disruptor:3.0.1
     |    |    \--- org.slf4j:slf4j-api:1.6.1 -> 1.7.25
     |    +--- com.clearspring.analytics:stream:2.5.2
     |    |    \--- it.unimi.dsi:fastutil:6.5.7
     |    +--- ch.qos.logback:logback-core:1.1.3
     |    +--- ch.qos.logback:logback-classic:1.1.3
     |    |    +--- ch.qos.logback:logback-core:1.1.3
     |    |    \--- org.slf4j:slf4j-api:1.7.7 -> 1.7.25
     |    +--- org.apache.cassandra:cassandra-thrift:3.11.5
     |    |    +--- org.apache.commons:commons-lang3:3.1
     |    |    +--- org.slf4j:slf4j-api:1.7.7 -> 1.7.25
     |    |    +--- org.slf4j:jcl-over-slf4j:1.7.7 (*)
     |    |    +--- com.carrotsearch:hppc:0.5.4
     |    |    +--- de.jflex:jflex:1.6.0
     |    |    |    \--- org.apache.ant:ant:1.7.0
     |    |    |         \--- org.apache.ant:ant-launcher:1.7.0
     |    |    +--- com.github.rholder:snowball-stemmer:1.3.0.581.1
     |    |    \--- com.googlecode.concurrent-trees:concurrent-trees:2.4.0
     |    +--- com.github.jbellis:jamm:0.3.0
     |    +--- joda-time:joda-time:2.4
     |    +--- org.fusesource:sigar:1.6.4
     |    +--- org.eclipse.jdt.core.compiler:ecj:4.4.2
     |    +--- org.caffinitas.ohc:ohc-core:0.4.4
     |    |    +--- org.slf4j:slf4j-api:1.7.12 -> 1.7.25
     |    |    \--- com.google.guava:guava:16.0 -> 18.0
     |    +--- org.caffinitas.ohc:ohc-core-j8:0.4.4
     |    |    \--- org.caffinitas.ohc:ohc-core:0.4.4 (*)
     |    +--- com.github.ben-manes.caffeine:caffeine:2.2.6
     |    +--- org.jctools:jctools-core:1.2.1
     |    \--- org.ow2.asm:asm:5.0.4
     +--- org.apache.thrift:libthrift:0.12.0
     |    +--- org.slf4j:slf4j-api:1.7.25
     |    +--- org.apache.httpcomponents:httpclient:4.5.6
     |    |    +--- org.apache.httpcomponents:httpcore:4.4.10
     |    |    +--- commons-logging:commons-logging:1.2
     |    |    \--- commons-codec:commons-codec:1.10
     |    \--- org.apache.httpcomponents:httpcore:4.4.1 -> 4.4.10
     +--- net.java.dev.jna:jna:4.1.0
     +--- org.hamcrest:hamcrest-core:1.3
     \--- org.hamcrest:hamcrest-library:1.3
          \--- org.hamcrest:hamcrest-core:1.3

testCompileClasspath - Compile classpath for source set 'test'.
+--- com.datastax.oss:java-driver-core:4.11.1
|    +--- com.datastax.oss:native-protocol:1.5.0
|    +--- io.netty:netty-handler:4.1.60.Final
|    |    +--- io.netty:netty-common:4.1.60.Final
|    |    +--- io.netty:netty-resolver:4.1.60.Final
|    |    |    \--- io.netty:netty-common:4.1.60.Final
|    |    +--- io.netty:netty-buffer:4.1.60.Final
|    |    |    \--- io.netty:netty-common:4.1.60.Final
|    |    +--- io.netty:netty-transport:4.1.60.Final
|    |    |    +--- io.netty:netty-common:4.1.60.Final
|    |    |    +--- io.netty:netty-buffer:4.1.60.Final (*)
|    |    |    \--- io.netty:netty-resolver:4.1.60.Final (*)
|    |    \--- io.netty:netty-codec:4.1.60.Final
|    |         +--- io.netty:netty-common:4.1.60.Final
|    |         +--- io.netty:netty-buffer:4.1.60.Final (*)
|    |         \--- io.netty:netty-transport:4.1.60.Final (*)
|    +--- com.datastax.oss:java-driver-shaded-guava:25.1-jre-graal-sub-1
|    +--- com.typesafe:config:1.4.1
|    +--- com.github.jnr:jnr-posix:3.1.5
|    |    +--- com.github.jnr:jnr-ffi:2.2.2
|    |    |    +--- com.github.jnr:jffi:1.3.1
|    |    |    +--- org.ow2.asm:asm:9.1
|    |    |    +--- org.ow2.asm:asm-commons:9.1
|    |    |    |    +--- org.ow2.asm:asm:9.1
|    |    |    |    +--- org.ow2.asm:asm-tree:9.1
|    |    |    |    |    \--- org.ow2.asm:asm:9.1
|    |    |    |    \--- org.ow2.asm:asm-analysis:9.1
|    |    |    |         \--- org.ow2.asm:asm-tree:9.1 (*)
|    |    |    +--- org.ow2.asm:asm-analysis:9.1 (*)
|    |    |    +--- org.ow2.asm:asm-tree:9.1 (*)
|    |    |    +--- org.ow2.asm:asm-util:9.1
|    |    |    |    +--- org.ow2.asm:asm:9.1
|    |    |    |    +--- org.ow2.asm:asm-tree:9.1 (*)
|    |    |    |    \--- org.ow2.asm:asm-analysis:9.1 (*)
|    |    |    +--- com.github.jnr:jnr-a64asm:1.0.0
|    |    |    \--- com.github.jnr:jnr-x86asm:1.0.2
|    |    \--- com.github.jnr:jnr-constants:0.10.1
|    +--- org.slf4j:slf4j-api:1.7.26 -> 1.7.30
|    +--- io.dropwizard.metrics:metrics-core:4.1.18
|    |    \--- org.slf4j:slf4j-api:1.7.30
|    +--- org.hdrhistogram:HdrHistogram:2.1.12
|    +--- com.esri.geometry:esri-geometry-api:1.2.1
|    |    +--- org.json:json:20090211
|    |    \--- org.codehaus.jackson:jackson-core-asl:1.9.12
|    +--- com.fasterxml.jackson.core:jackson-core:2.12.2
|    +--- com.fasterxml.jackson.core:jackson-databind:2.12.2
|    |    +--- com.fasterxml.jackson.core:jackson-annotations:2.12.2
|    |    \--- com.fasterxml.jackson.core:jackson-core:2.12.2
|    +--- org.reactivestreams:reactive-streams:1.0.3
|    +--- com.github.stephenc.jcip:jcip-annotations:1.0-1
|    \--- com.github.spotbugs:spotbugs-annotations:3.1.12
|         \--- com.google.code.findbugs:jsr305:3.0.2
+--- org.slf4j:slf4j-api:1.7.25 -> 1.7.30
+--- org.cassandraunit:cassandra-unit:4.3.1.0
|    +--- junit:junit:4.12
|    |    \--- org.hamcrest:hamcrest-core:1.3
|    +--- org.apache.cassandra:cassandra-all:3.11.5
|    |    +--- org.xerial.snappy:snappy-java:1.1.1.7
|    |    +--- net.jpountz.lz4:lz4:1.3.0
|    |    +--- com.ning:compress-lzf:0.8.4
|    |    +--- com.google.guava:guava:18.0 -> 25.1-jre
|    |    |    +--- com.google.code.findbugs:jsr305:3.0.2
|    |    |    +--- org.checkerframework:checker-qual:2.0.0
|    |    |    +--- com.google.errorprone:error_prone_annotations:2.1.3
|    |    |    +--- com.google.j2objc:j2objc-annotations:1.1
|    |    |    \--- org.codehaus.mojo:animal-sniffer-annotations:1.14
|    |    +--- commons-cli:commons-cli:1.1
|    |    +--- commons-codec:commons-codec:1.9 -> 1.10
|    |    +--- org.apache.commons:commons-lang3:3.1
|    |    +--- org.apache.commons:commons-math3:3.2
|    |    +--- com.googlecode.concurrentlinkedhashmap:concurrentlinkedhashmap-lru:1.4
|    |    +--- org.antlr:antlr:3.5.2
|    |    |    +--- org.antlr:antlr-runtime:3.5.2
|    |    |    \--- org.antlr:ST4:4.0.8
|    |    |         \--- org.antlr:antlr-runtime:3.5.2
|    |    +--- org.antlr:antlr-runtime:3.5.2
|    |    +--- org.slf4j:slf4j-api:1.7.7 -> 1.7.30
|    |    +--- org.slf4j:jcl-over-slf4j:1.7.7
|    |    |    \--- org.slf4j:slf4j-api:1.7.7 -> 1.7.30
|    |    +--- org.codehaus.jackson:jackson-core-asl:1.9.2 -> 1.9.12
|    |    +--- org.codehaus.jackson:jackson-mapper-asl:1.9.2
|    |    |    \--- org.codehaus.jackson:jackson-core-asl:1.9.2 -> 1.9.12
|    |    +--- com.googlecode.json-simple:json-simple:1.1
|    |    +--- com.boundary:high-scale-lib:1.0.6
|    |    +--- org.yaml:snakeyaml:1.11 -> 1.12
|    |    +--- org.mindrot:jbcrypt:0.3m
|    |    +--- io.airlift:airline:0.6
|    |    |    +--- javax.inject:javax.inject:1
|    |    |    \--- com.google.guava:guava:12.0 -> 25.1-jre (*)
|    |    +--- io.dropwizard.metrics:metrics-core:3.1.5 -> 4.1.18 (*)
|    |    +--- io.dropwizard.metrics:metrics-jvm:3.1.5
|    |    |    +--- io.dropwizard.metrics:metrics-core:3.1.5 -> 4.1.18 (*)
|    |    |    \--- org.slf4j:slf4j-api:1.7.7 -> 1.7.30
|    |    +--- com.addthis.metrics:reporter-config3:3.0.3
|    |    |    +--- com.addthis.metrics:reporter-config-base:3.0.3
|    |    |    |    +--- org.slf4j:slf4j-api:1.7.7 -> 1.7.30
|    |    |    |    +--- org.yaml:snakeyaml:1.12
|    |    |    |    +--- org.hibernate:hibernate-validator:4.3.0.Final
|    |    |    |    |    +--- javax.validation:validation-api:1.0.0.GA
|    |    |    |    |    \--- org.jboss.logging:jboss-logging:3.1.0.CR2
|    |    |    |    \--- org.apache.commons:commons-lang3:3.1
|    |    |    +--- io.dropwizard.metrics:metrics-core:3.1.0 -> 4.1.18 (*)
|    |    |    +--- org.slf4j:slf4j-api:1.7.7 -> 1.7.30
|    |    |    +--- org.yaml:snakeyaml:1.12
|    |    |    +--- org.hibernate:hibernate-validator:4.3.0.Final (*)
|    |    |    \--- org.apache.commons:commons-lang3:3.1
|    |    +--- com.thinkaurelius.thrift:thrift-server:0.3.7
|    |    |    +--- com.lmax:disruptor:3.0.1
|    |    |    \--- org.slf4j:slf4j-api:1.6.1 -> 1.7.30
|    |    +--- com.clearspring.analytics:stream:2.5.2
|    |    |    \--- it.unimi.dsi:fastutil:6.5.7
|    |    +--- ch.qos.logback:logback-core:1.1.3
|    |    +--- ch.qos.logback:logback-classic:1.1.3
|    |    |    +--- ch.qos.logback:logback-core:1.1.3
|    |    |    \--- org.slf4j:slf4j-api:1.7.7 -> 1.7.30
|    |    +--- org.apache.cassandra:cassandra-thrift:3.11.5
|    |    |    +--- org.apache.commons:commons-lang3:3.1
|    |    |    +--- org.slf4j:slf4j-api:1.7.7 -> 1.7.30
|    |    |    +--- org.slf4j:jcl-over-slf4j:1.7.7 (*)
|    |    |    +--- com.carrotsearch:hppc:0.5.4
|    |    |    +--- de.jflex:jflex:1.6.0
|    |    |    |    \--- org.apache.ant:ant:1.7.0
|    |    |    |         \--- org.apache.ant:ant-launcher:1.7.0
|    |    |    +--- com.github.rholder:snowball-stemmer:1.3.0.581.1
|    |    |    \--- com.googlecode.concurrent-trees:concurrent-trees:2.4.0
|    |    +--- com.github.jbellis:jamm:0.3.0
|    |    +--- joda-time:joda-time:2.4
|    |    +--- org.fusesource:sigar:1.6.4
|    |    +--- org.eclipse.jdt.core.compiler:ecj:4.4.2
|    |    +--- org.caffinitas.ohc:ohc-core:0.4.4
|    |    |    +--- org.slf4j:slf4j-api:1.7.12 -> 1.7.30
|    |    |    \--- com.google.guava:guava:16.0 -> 25.1-jre (*)
|    |    +--- org.caffinitas.ohc:ohc-core-j8:0.4.4
|    |    |    \--- org.caffinitas.ohc:ohc-core:0.4.4 (*)
|    |    +--- com.github.ben-manes.caffeine:caffeine:2.2.6
|    |    +--- org.jctools:jctools-core:1.2.1
|    |    \--- org.ow2.asm:asm:5.0.4 -> 9.1
|    +--- org.apache.thrift:libthrift:0.12.0
|    |    +--- org.slf4j:slf4j-api:1.7.25 -> 1.7.30
|    |    +--- org.apache.httpcomponents:httpclient:4.5.6
|    |    |    +--- org.apache.httpcomponents:httpcore:4.4.10
|    |    |    +--- commons-logging:commons-logging:1.2
|    |    |    \--- commons-codec:commons-codec:1.10
|    |    \--- org.apache.httpcomponents:httpcore:4.4.1 -> 4.4.10
|    +--- net.java.dev.jna:jna:4.1.0
|    +--- org.hamcrest:hamcrest-core:1.3
|    \--- org.hamcrest:hamcrest-library:1.3
|         \--- org.hamcrest:hamcrest-core:1.3
+--- com.google.guava:guava:25.1-jre (*)
+--- org.apache.logging.log4j:log4j-core:2.16.0
|    \--- org.apache.logging.log4j:log4j-api:2.16.0
+--- junit:junit:4.12 (*)
+--- org.assertj:assertj-core:3.12.2
+--- org.mockito:mockito-core:2.25.1
|    +--- net.bytebuddy:byte-buddy:1.9.7
|    +--- net.bytebuddy:byte-buddy-agent:1.9.7
|    \--- org.objenesis:objenesis:2.6 -> 3.0.1
+--- org.powermock:powermock-api-mockito2:2.0.0
|    +--- org.powermock:powermock-api-support:2.0.0
|    |    +--- org.powermock:powermock-reflect:2.0.0
|    |    |    +--- org.objenesis:objenesis:3.0.1
|    |    |    +--- net.bytebuddy:byte-buddy:1.9.3 -> 1.9.7
|    |    |    \--- net.bytebuddy:byte-buddy-agent:1.9.3 -> 1.9.7
|    |    \--- org.powermock:powermock-core:2.0.0
|    |         +--- org.powermock:powermock-reflect:2.0.0 (*)
|    |         +--- org.javassist:javassist:3.24.0-GA
|    |         +--- net.bytebuddy:byte-buddy:1.9.3 -> 1.9.7
|    |         \--- net.bytebuddy:byte-buddy-agent:1.9.3 -> 1.9.7
|    \--- org.mockito:mockito-core:2.23.0 -> 2.25.1 (*)
+--- org.powermock:powermock-module-junit4:2.0.0
|    +--- org.powermock:powermock-module-junit4-common:2.0.0
|    |    +--- org.powermock:powermock-reflect:2.0.0 (*)
|    |    +--- org.powermock:powermock-core:2.0.0 (*)
|    |    +--- junit:junit:4.12 (*)
|    |    \--- org.hamcrest:hamcrest-core:1.3
|    +--- junit:junit:4.12 (*)
|    \--- org.hamcrest:hamcrest-core:1.3
+--- org.awaitility:awaitility:3.1.6
|    +--- org.hamcrest:hamcrest-library:1.3 (*)
|    +--- org.hamcrest:hamcrest-core:1.3
|    \--- org.objenesis:objenesis:2.6 -> 3.0.1
\--- com.datastax.oss.simulacron:simulacron-driver-3x:0.11.0
     +--- com.datastax.oss.simulacron:simulacron-native-server:0.11.0
     |    +--- com.datastax.oss.simulacron:simulacron-common:0.11.0
     |    |    +--- com.fasterxml.jackson.core:jackson-databind:2.12.1 -> 2.12.2 (*)
     |    |    +--- com.datastax.oss.simulacron:simulacron-native-protocol-json:0.11.0
     |    |    |    +--- com.fasterxml.jackson.core:jackson-databind:2.12.1 -> 2.12.2 (*)
     |    |    |    \--- org.slf4j:slf4j-api:1.7.23 -> 1.7.30
     |    |    \--- org.slf4j:slf4j-api:1.7.23 -> 1.7.30
     |    +--- io.netty:netty-handler:4.1.12.Final -> 4.1.60.Final (*)
     |    \--- org.slf4j:slf4j-api:1.7.23 -> 1.7.30
     +--- com.datastax.cassandra:cassandra-driver-core:3.10.0
     |    +--- io.netty:netty-handler:4.0.56.Final -> 4.1.60.Final (*)
     |    +--- com.google.guava:guava:19.0 -> 25.1-jre (*)
     |    +--- io.dropwizard.metrics:metrics-core:3.2.2 -> 4.1.18 (*)
     |    +--- org.slf4j:slf4j-api:1.7.25 -> 1.7.30
     |    +--- com.github.jnr:jnr-ffi:2.1.7 -> 2.2.2 (*)
     |    +--- com.github.jnr:jnr-posix:3.0.44 -> 3.1.5 (*)
     |    \--- com.fasterxml.jackson.core:jackson-databind:2.7.9.3 -> 2.12.2 (*)
     \--- org.slf4j:slf4j-api:1.7.23 -> 1.7.30

testCompileOnly - Compile only dependencies for source set 'test'.
No dependencies

testImplementation - Implementation only dependencies for source set 'test'. (n)
+--- com.google.guava:guava:25.1-jre (n)
+--- org.apache.logging.log4j:log4j-core:2.16.0 (n)
+--- junit:junit:4.12 (n)
+--- org.assertj:assertj-core:3.12.2 (n)
+--- org.mockito:mockito-core:2.25.1 (n)
+--- org.powermock:powermock-api-mockito2:2.0.0 (n)
+--- org.powermock:powermock-module-junit4:2.0.0 (n)
+--- org.awaitility:awaitility:3.1.6 (n)
\--- com.datastax.oss.simulacron:simulacron-driver-3x:0.11.0 (n)

testRuntime - Runtime dependencies for source set 'test' (deprecated, use 'testRuntimeOnly' instead).
\--- org.cassandraunit:cassandra-unit:4.3.1.0
     +--- junit:junit:4.12
     |    \--- org.hamcrest:hamcrest-core:1.3
     +--- org.apache.cassandra:cassandra-all:3.11.5
     |    +--- org.xerial.snappy:snappy-java:1.1.1.7
     |    +--- net.jpountz.lz4:lz4:1.3.0
     |    +--- com.ning:compress-lzf:0.8.4
     |    +--- com.google.guava:guava:18.0
     |    +--- commons-cli:commons-cli:1.1
     |    +--- commons-codec:commons-codec:1.9 -> 1.10
     |    +--- org.apache.commons:commons-lang3:3.1
     |    +--- org.apache.commons:commons-math3:3.2
     |    +--- com.googlecode.concurrentlinkedhashmap:concurrentlinkedhashmap-lru:1.4
     |    +--- org.antlr:antlr:3.5.2
     |    |    +--- org.antlr:antlr-runtime:3.5.2
     |    |    \--- org.antlr:ST4:4.0.8
     |    |         \--- org.antlr:antlr-runtime:3.5.2
     |    +--- org.antlr:antlr-runtime:3.5.2
     |    +--- org.slf4j:slf4j-api:1.7.7 -> 1.7.25
     |    +--- org.slf4j:jcl-over-slf4j:1.7.7
     |    |    \--- org.slf4j:slf4j-api:1.7.7 -> 1.7.25
     |    +--- org.codehaus.jackson:jackson-core-asl:1.9.2
     |    +--- org.codehaus.jackson:jackson-mapper-asl:1.9.2
     |    |    \--- org.codehaus.jackson:jackson-core-asl:1.9.2
     |    +--- com.googlecode.json-simple:json-simple:1.1
     |    +--- com.boundary:high-scale-lib:1.0.6
     |    +--- org.yaml:snakeyaml:1.11 -> 1.12
     |    +--- org.mindrot:jbcrypt:0.3m
     |    +--- io.airlift:airline:0.6
     |    |    +--- javax.inject:javax.inject:1
     |    |    \--- com.google.guava:guava:12.0 -> 18.0
     |    +--- io.dropwizard.metrics:metrics-core:3.1.5
     |    |    \--- org.slf4j:slf4j-api:1.7.7 -> 1.7.25
     |    +--- io.dropwizard.metrics:metrics-jvm:3.1.5
     |    |    +--- io.dropwizard.metrics:metrics-core:3.1.5 (*)
     |    |    \--- org.slf4j:slf4j-api:1.7.7 -> 1.7.25
     |    +--- com.addthis.metrics:reporter-config3:3.0.3
     |    |    +--- com.addthis.metrics:reporter-config-base:3.0.3
     |    |    |    +--- org.slf4j:slf4j-api:1.7.7 -> 1.7.25
     |    |    |    +--- org.yaml:snakeyaml:1.12
     |    |    |    +--- org.hibernate:hibernate-validator:4.3.0.Final
     |    |    |    |    +--- javax.validation:validation-api:1.0.0.GA
     |    |    |    |    \--- org.jboss.logging:jboss-logging:3.1.0.CR2
     |    |    |    \--- org.apache.commons:commons-lang3:3.1
     |    |    +--- io.dropwizard.metrics:metrics-core:3.1.0 -> 3.1.5 (*)
     |    |    +--- org.slf4j:slf4j-api:1.7.7 -> 1.7.25
     |    |    +--- org.yaml:snakeyaml:1.12
     |    |    +--- org.hibernate:hibernate-validator:4.3.0.Final (*)
     |    |    \--- org.apache.commons:commons-lang3:3.1
     |    +--- com.thinkaurelius.thrift:thrift-server:0.3.7
     |    |    +--- com.lmax:disruptor:3.0.1
     |    |    \--- org.slf4j:slf4j-api:1.6.1 -> 1.7.25
     |    +--- com.clearspring.analytics:stream:2.5.2
     |    |    \--- it.unimi.dsi:fastutil:6.5.7
     |    +--- ch.qos.logback:logback-core:1.1.3
     |    +--- ch.qos.logback:logback-classic:1.1.3
     |    |    +--- ch.qos.logback:logback-core:1.1.3
     |    |    \--- org.slf4j:slf4j-api:1.7.7 -> 1.7.25
     |    +--- org.apache.cassandra:cassandra-thrift:3.11.5
     |    |    +--- org.apache.commons:commons-lang3:3.1
     |    |    +--- org.slf4j:slf4j-api:1.7.7 -> 1.7.25
     |    |    +--- org.slf4j:jcl-over-slf4j:1.7.7 (*)
     |    |    +--- com.carrotsearch:hppc:0.5.4
     |    |    +--- de.jflex:jflex:1.6.0
     |    |    |    \--- org.apache.ant:ant:1.7.0
     |    |    |         \--- org.apache.ant:ant-launcher:1.7.0
     |    |    +--- com.github.rholder:snowball-stemmer:1.3.0.581.1
     |    |    \--- com.googlecode.concurrent-trees:concurrent-trees:2.4.0
     |    +--- com.github.jbellis:jamm:0.3.0
     |    +--- joda-time:joda-time:2.4
     |    +--- org.fusesource:sigar:1.6.4
     |    +--- org.eclipse.jdt.core.compiler:ecj:4.4.2
     |    +--- org.caffinitas.ohc:ohc-core:0.4.4
     |    |    +--- org.slf4j:slf4j-api:1.7.12 -> 1.7.25
     |    |    \--- com.google.guava:guava:16.0 -> 18.0
     |    +--- org.caffinitas.ohc:ohc-core-j8:0.4.4
     |    |    \--- org.caffinitas.ohc:ohc-core:0.4.4 (*)
     |    +--- com.github.ben-manes.caffeine:caffeine:2.2.6
     |    +--- org.jctools:jctools-core:1.2.1
     |    \--- org.ow2.asm:asm:5.0.4
     +--- org.apache.thrift:libthrift:0.12.0
     |    +--- org.slf4j:slf4j-api:1.7.25
     |    +--- org.apache.httpcomponents:httpclient:4.5.6
     |    |    +--- org.apache.httpcomponents:httpcore:4.4.10
     |    |    +--- commons-logging:commons-logging:1.2
     |    |    \--- commons-codec:commons-codec:1.10
     |    \--- org.apache.httpcomponents:httpcore:4.4.1 -> 4.4.10
     +--- net.java.dev.jna:jna:4.1.0
     +--- org.hamcrest:hamcrest-core:1.3
     \--- org.hamcrest:hamcrest-library:1.3
          \--- org.hamcrest:hamcrest-core:1.3

testRuntimeClasspath - Runtime classpath of source set 'test'.
+--- com.datastax.oss:java-driver-core:4.11.1
|    +--- com.datastax.oss:native-protocol:1.5.0
|    +--- io.netty:netty-handler:4.1.60.Final
|    |    +--- io.netty:netty-common:4.1.60.Final
|    |    +--- io.netty:netty-resolver:4.1.60.Final
|    |    |    \--- io.netty:netty-common:4.1.60.Final
|    |    +--- io.netty:netty-buffer:4.1.60.Final
|    |    |    \--- io.netty:netty-common:4.1.60.Final
|    |    +--- io.netty:netty-transport:4.1.60.Final
|    |    |    +--- io.netty:netty-common:4.1.60.Final
|    |    |    +--- io.netty:netty-buffer:4.1.60.Final (*)
|    |    |    \--- io.netty:netty-resolver:4.1.60.Final (*)
|    |    \--- io.netty:netty-codec:4.1.60.Final
|    |         +--- io.netty:netty-common:4.1.60.Final
|    |         +--- io.netty:netty-buffer:4.1.60.Final (*)
|    |         \--- io.netty:netty-transport:4.1.60.Final (*)
|    +--- com.datastax.oss:java-driver-shaded-guava:25.1-jre-graal-sub-1
|    +--- com.typesafe:config:1.4.1
|    +--- com.github.jnr:jnr-posix:3.1.5
|    |    +--- com.github.jnr:jnr-ffi:2.2.2
|    |    |    +--- com.github.jnr:jffi:1.3.1
|    |    |    +--- org.ow2.asm:asm:9.1
|    |    |    +--- org.ow2.asm:asm-commons:9.1
|    |    |    |    +--- org.ow2.asm:asm:9.1
|    |    |    |    +--- org.ow2.asm:asm-tree:9.1
|    |    |    |    |    \--- org.ow2.asm:asm:9.1
|    |    |    |    \--- org.ow2.asm:asm-analysis:9.1
|    |    |    |         \--- org.ow2.asm:asm-tree:9.1 (*)
|    |    |    +--- org.ow2.asm:asm-analysis:9.1 (*)
|    |    |    +--- org.ow2.asm:asm-tree:9.1 (*)
|    |    |    +--- org.ow2.asm:asm-util:9.1
|    |    |    |    +--- org.ow2.asm:asm:9.1
|    |    |    |    +--- org.ow2.asm:asm-tree:9.1 (*)
|    |    |    |    \--- org.ow2.asm:asm-analysis:9.1 (*)
|    |    |    +--- com.github.jnr:jnr-a64asm:1.0.0
|    |    |    \--- com.github.jnr:jnr-x86asm:1.0.2
|    |    \--- com.github.jnr:jnr-constants:0.10.1
|    +--- org.slf4j:slf4j-api:1.7.26 -> 1.7.30
|    +--- io.dropwizard.metrics:metrics-core:4.1.18
|    |    \--- org.slf4j:slf4j-api:1.7.30
|    +--- org.hdrhistogram:HdrHistogram:2.1.12
|    +--- com.esri.geometry:esri-geometry-api:1.2.1
|    |    +--- org.json:json:20090211
|    |    \--- org.codehaus.jackson:jackson-core-asl:1.9.12
|    +--- com.fasterxml.jackson.core:jackson-core:2.12.2
|    +--- com.fasterxml.jackson.core:jackson-databind:2.12.2
|    |    +--- com.fasterxml.jackson.core:jackson-annotations:2.12.2
|    |    \--- com.fasterxml.jackson.core:jackson-core:2.12.2
|    +--- org.reactivestreams:reactive-streams:1.0.3
|    +--- com.github.stephenc.jcip:jcip-annotations:1.0-1
|    \--- com.github.spotbugs:spotbugs-annotations:3.1.12
|         \--- com.google.code.findbugs:jsr305:3.0.2
+--- org.slf4j:slf4j-api:1.7.25 -> 1.7.30
+--- org.cassandraunit:cassandra-unit:4.3.1.0
|    +--- junit:junit:4.12
|    |    \--- org.hamcrest:hamcrest-core:1.3
|    +--- org.apache.cassandra:cassandra-all:3.11.5
|    |    +--- org.xerial.snappy:snappy-java:1.1.1.7
|    |    +--- net.jpountz.lz4:lz4:1.3.0
|    |    +--- com.ning:compress-lzf:0.8.4
|    |    +--- com.google.guava:guava:18.0 -> 25.1-jre
|    |    |    +--- com.google.code.findbugs:jsr305:3.0.2
|    |    |    +--- org.checkerframework:checker-qual:2.0.0
|    |    |    +--- com.google.errorprone:error_prone_annotations:2.1.3
|    |    |    +--- com.google.j2objc:j2objc-annotations:1.1
|    |    |    \--- org.codehaus.mojo:animal-sniffer-annotations:1.14
|    |    +--- commons-cli:commons-cli:1.1
|    |    +--- commons-codec:commons-codec:1.9 -> 1.10
|    |    +--- org.apache.commons:commons-lang3:3.1
|    |    +--- org.apache.commons:commons-math3:3.2
|    |    +--- com.googlecode.concurrentlinkedhashmap:concurrentlinkedhashmap-lru:1.4
|    |    +--- org.antlr:antlr:3.5.2
|    |    |    +--- org.antlr:antlr-runtime:3.5.2
|    |    |    \--- org.antlr:ST4:4.0.8
|    |    |         \--- org.antlr:antlr-runtime:3.5.2
|    |    +--- org.antlr:antlr-runtime:3.5.2
|    |    +--- org.slf4j:slf4j-api:1.7.7 -> 1.7.30
|    |    +--- org.slf4j:jcl-over-slf4j:1.7.7
|    |    |    \--- org.slf4j:slf4j-api:1.7.7 -> 1.7.30
|    |    +--- org.codehaus.jackson:jackson-core-asl:1.9.2 -> 1.9.12
|    |    +--- org.codehaus.jackson:jackson-mapper-asl:1.9.2
|    |    |    \--- org.codehaus.jackson:jackson-core-asl:1.9.2 -> 1.9.12
|    |    +--- com.googlecode.json-simple:json-simple:1.1
|    |    +--- com.boundary:high-scale-lib:1.0.6
|    |    +--- org.yaml:snakeyaml:1.11 -> 1.12
|    |    +--- org.mindrot:jbcrypt:0.3m
|    |    +--- io.airlift:airline:0.6
|    |    |    +--- javax.inject:javax.inject:1
|    |    |    \--- com.google.guava:guava:12.0 -> 25.1-jre (*)
|    |    +--- io.dropwizard.metrics:metrics-core:3.1.5 -> 4.1.18 (*)
|    |    +--- io.dropwizard.metrics:metrics-jvm:3.1.5
|    |    |    +--- io.dropwizard.metrics:metrics-core:3.1.5 -> 4.1.18 (*)
|    |    |    \--- org.slf4j:slf4j-api:1.7.7 -> 1.7.30
|    |    +--- com.addthis.metrics:reporter-config3:3.0.3
|    |    |    +--- com.addthis.metrics:reporter-config-base:3.0.3
|    |    |    |    +--- org.slf4j:slf4j-api:1.7.7 -> 1.7.30
|    |    |    |    +--- org.yaml:snakeyaml:1.12
|    |    |    |    +--- org.hibernate:hibernate-validator:4.3.0.Final
|    |    |    |    |    +--- javax.validation:validation-api:1.0.0.GA
|    |    |    |    |    \--- org.jboss.logging:jboss-logging:3.1.0.CR2
|    |    |    |    \--- org.apache.commons:commons-lang3:3.1
|    |    |    +--- io.dropwizard.metrics:metrics-core:3.1.0 -> 4.1.18 (*)
|    |    |    +--- org.slf4j:slf4j-api:1.7.7 -> 1.7.30
|    |    |    +--- org.yaml:snakeyaml:1.12
|    |    |    +--- org.hibernate:hibernate-validator:4.3.0.Final (*)
|    |    |    \--- org.apache.commons:commons-lang3:3.1
|    |    +--- com.thinkaurelius.thrift:thrift-server:0.3.7
|    |    |    +--- com.lmax:disruptor:3.0.1
|    |    |    \--- org.slf4j:slf4j-api:1.6.1 -> 1.7.30
|    |    +--- com.clearspring.analytics:stream:2.5.2
|    |    |    \--- it.unimi.dsi:fastutil:6.5.7
|    |    +--- ch.qos.logback:logback-core:1.1.3
|    |    +--- ch.qos.logback:logback-classic:1.1.3
|    |    |    +--- ch.qos.logback:logback-core:1.1.3
|    |    |    \--- org.slf4j:slf4j-api:1.7.7 -> 1.7.30
|    |    +--- org.apache.cassandra:cassandra-thrift:3.11.5
|    |    |    +--- org.apache.commons:commons-lang3:3.1
|    |    |    +--- org.slf4j:slf4j-api:1.7.7 -> 1.7.30
|    |    |    +--- org.slf4j:jcl-over-slf4j:1.7.7 (*)
|    |    |    +--- com.carrotsearch:hppc:0.5.4
|    |    |    +--- de.jflex:jflex:1.6.0
|    |    |    |    \--- org.apache.ant:ant:1.7.0
|    |    |    |         \--- org.apache.ant:ant-launcher:1.7.0
|    |    |    +--- com.github.rholder:snowball-stemmer:1.3.0.581.1
|    |    |    \--- com.googlecode.concurrent-trees:concurrent-trees:2.4.0
|    |    +--- com.github.jbellis:jamm:0.3.0
|    |    +--- joda-time:joda-time:2.4
|    |    +--- org.fusesource:sigar:1.6.4
|    |    +--- org.eclipse.jdt.core.compiler:ecj:4.4.2
|    |    +--- org.caffinitas.ohc:ohc-core:0.4.4
|    |    |    +--- org.slf4j:slf4j-api:1.7.12 -> 1.7.30
|    |    |    \--- com.google.guava:guava:16.0 -> 25.1-jre (*)
|    |    +--- org.caffinitas.ohc:ohc-core-j8:0.4.4
|    |    |    \--- org.caffinitas.ohc:ohc-core:0.4.4 (*)
|    |    +--- com.github.ben-manes.caffeine:caffeine:2.2.6
|    |    +--- org.jctools:jctools-core:1.2.1
|    |    \--- org.ow2.asm:asm:5.0.4 -> 9.1
|    +--- org.apache.thrift:libthrift:0.12.0
|    |    +--- org.slf4j:slf4j-api:1.7.25 -> 1.7.30
|    |    +--- org.apache.httpcomponents:httpclient:4.5.6
|    |    |    +--- org.apache.httpcomponents:httpcore:4.4.10
|    |    |    +--- commons-logging:commons-logging:1.2
|    |    |    \--- commons-codec:commons-codec:1.10
|    |    \--- org.apache.httpcomponents:httpcore:4.4.1 -> 4.4.10
|    +--- net.java.dev.jna:jna:4.1.0
|    +--- org.hamcrest:hamcrest-core:1.3
|    \--- org.hamcrest:hamcrest-library:1.3
|         \--- org.hamcrest:hamcrest-core:1.3
+--- com.google.guava:guava:25.1-jre (*)
+--- org.apache.logging.log4j:log4j-core:2.16.0
|    \--- org.apache.logging.log4j:log4j-api:2.16.0
+--- junit:junit:4.12 (*)
+--- org.assertj:assertj-core:3.12.2
+--- org.mockito:mockito-core:2.25.1
|    +--- net.bytebuddy:byte-buddy:1.9.7
|    +--- net.bytebuddy:byte-buddy-agent:1.9.7
|    \--- org.objenesis:objenesis:2.6 -> 3.0.1
+--- org.powermock:powermock-api-mockito2:2.0.0
|    +--- org.powermock:powermock-api-support:2.0.0
|    |    +--- org.powermock:powermock-reflect:2.0.0
|    |    |    +--- org.objenesis:objenesis:3.0.1
|    |    |    +--- net.bytebuddy:byte-buddy:1.9.3 -> 1.9.7
|    |    |    \--- net.bytebuddy:byte-buddy-agent:1.9.3 -> 1.9.7
|    |    \--- org.powermock:powermock-core:2.0.0
|    |         +--- org.powermock:powermock-reflect:2.0.0 (*)
|    |         +--- org.javassist:javassist:3.24.0-GA
|    |         +--- net.bytebuddy:byte-buddy:1.9.3 -> 1.9.7
|    |         \--- net.bytebuddy:byte-buddy-agent:1.9.3 -> 1.9.7
|    \--- org.mockito:mockito-core:2.23.0 -> 2.25.1 (*)
+--- org.powermock:powermock-module-junit4:2.0.0
|    +--- org.powermock:powermock-module-junit4-common:2.0.0
|    |    +--- org.powermock:powermock-reflect:2.0.0 (*)
|    |    +--- org.powermock:powermock-core:2.0.0 (*)
|    |    +--- junit:junit:4.12 (*)
|    |    \--- org.hamcrest:hamcrest-core:1.3
|    +--- junit:junit:4.12 (*)
|    \--- org.hamcrest:hamcrest-core:1.3
+--- org.awaitility:awaitility:3.1.6
|    +--- org.hamcrest:hamcrest-library:1.3 (*)
|    +--- org.hamcrest:hamcrest-core:1.3
|    \--- org.objenesis:objenesis:2.6 -> 3.0.1
\--- com.datastax.oss.simulacron:simulacron-driver-3x:0.11.0
     +--- com.datastax.oss.simulacron:simulacron-native-server:0.11.0
     |    +--- com.datastax.oss.simulacron:simulacron-common:0.11.0
     |    |    +--- com.fasterxml.jackson.core:jackson-databind:2.12.1 -> 2.12.2 (*)
     |    |    +--- com.datastax.oss.simulacron:simulacron-native-protocol-json:0.11.0
     |    |    |    +--- com.fasterxml.jackson.core:jackson-databind:2.12.1 -> 2.12.2 (*)
     |    |    |    \--- org.slf4j:slf4j-api:1.7.23 -> 1.7.30
     |    |    \--- org.slf4j:slf4j-api:1.7.23 -> 1.7.30
     |    +--- io.netty:netty-handler:4.1.12.Final -> 4.1.60.Final (*)
     |    \--- org.slf4j:slf4j-api:1.7.23 -> 1.7.30
     +--- com.datastax.cassandra:cassandra-driver-core:3.10.0
     |    +--- io.netty:netty-handler:4.0.56.Final -> 4.1.60.Final (*)
     |    +--- com.google.guava:guava:19.0 -> 25.1-jre (*)
     |    +--- io.dropwizard.metrics:metrics-core:3.2.2 -> 4.1.18 (*)
     |    +--- org.slf4j:slf4j-api:1.7.25 -> 1.7.30
     |    +--- com.github.jnr:jnr-ffi:2.1.7 -> 2.2.2 (*)
     |    +--- com.github.jnr:jnr-posix:3.0.44 -> 3.1.5 (*)
     |    \--- com.fasterxml.jackson.core:jackson-databind:2.7.9.3 -> 2.12.2 (*)
     \--- org.slf4j:slf4j-api:1.7.23 -> 1.7.30

testRuntimeOnly - Runtime only dependencies for source set 'test'. (n)
No dependencies

(*) - dependencies omitted (listed previously)

(n) - Not resolved (configuration is not meant to be resolved)

A web-based, searchable dependency report is available by adding the --scan option.

BUILD SUCCESSFUL in 1s
1 actionable task: 1 executed
rauligsky commented 2 years ago

For our apps, we have been excluding log4j explicitly for all scopes (runtime, compile, testRuntime, testCompile) and submodules to avoid accidentally adding log4j as a transitive dependency. At least for now, until we are sure we can stop pipelines from progressing if this goes in any of our projects (I believe Veracode is not s showstopper now).

Initially, it was only excluded for runtime and compile scopes only; we were adding explicit exclusions wherever needed. It was decided for testing dependencies, too, hence the explicit exclusion "everywhere" until we have the initiative in place to update all our dependencies.

rauligsky commented 2 years ago

Sorry I didn't mention it after, happy to close this one as it is an internal tool and the upgrade has been done already. Thanks!