vector4wang / spring-boot-quick

:herb: 基于springboot的快速学习示例,整合自己遇到的开源框架,如:rabbitmq(延迟队列)、Kafka、jpa、redies、oauth2、swagger、jsp、docker、k3s、k3d、k8s、mybatis加解密插件、异常处理、日志输出、多模块开发、多环境打包、缓存cache、爬虫、jwt、GraphQL、dubbo、zookeeper和Async等等:pushpin:
http://blog.wangxc.club
2.49k stars 909 forks source link

Remove redundant dependencies #32

Closed Celebrate-future closed 3 years ago

Celebrate-future commented 3 years ago

@vector4wang Hi, I am a user of project com.quick:quick-method-evaluate:1.0-SNAPSHOT. I found that its pom file introduced 13 dependencies. However, among them, 11 libraries (84%) have not been used by your project (the redundant dependencies are listed below). Reduce these useless dependencies can help prevent conflicts between library versions. MeanWhile, it can minimize the total added size to projects. It can also help enable advanced scenarios for users of your package. This PR helps com.quick:quick-method-evaluate:1.0-SNAPSHOT lose weight :) I have tested the revised configuration in my local environment. It is safe to remove the unused libraries.

Best regards

Redundant dependencies----


com.github.houbb:paradise-common:jar:1.1.1:compile
org.apache.commons:commons-math3:jar:3.6.1:compile
org.junit.platform:junit-platform-commons:jar:1.2.0:compile
com.google.guava:guava:jar:21.0:compile
org.junit.jupiter:junit-jupiter-api:jar:5.2.0:compile
org.junit.jupiter:junit-jupiter-engine:jar:5.2.0:compile
org.freemarker:freemarker:jar:2.3.23:compile
org.opentest4j:opentest4j:jar:1.1.0:compile
com.github.houbb:log-integration:jar:1.1.3:compile
org.apiguardian:apiguardian-api:jar:1.0.0:compile
org.junit.platform:junit-platform-engine:jar:1.2.0:compile

Vulnerable libraries

com.google.guava:guava:21.0 (CVE-2020-8908)

Outdated dependencies

com.google.guava:guava:21.0 (2388 days without maintenance) org.junit.jupiter:junit-jupiter-api:5.2.0 (1916 days without maintenance) com.github.houbb:log-integration:1.1.3 (2007 days without maintenance) org.apiguardian:apiguardian-api:1.0.0 (2148 days without maintenance) org.opentest4j:opentest4j:1.1.0 (1916 days without maintenance) org.junit.platform:junit-platform-commons:1.2.0 (1916 days without maintenance)