yzcheng90 / X-SpringBoot

X-SpringBoot是一个轻量级的Java快速开发平台,能快速开发项目并交付【接私活利器】
2.3k stars 740 forks source link

Could x-springboot:x-springboot:5.0 drop off redundant dependencies? #31

Open slimming-fat opened 1 year ago

slimming-fat commented 1 year ago

image image image

Hi, I found that x-springboot:x-springboot:5.0’s pom file introduced 119 dependencies. However, among them,5 libraries (4% have not been used by your project), the redundant dependencies are listed below.

More seriously, 1 redundant library has not been maintained by developers for more than 3 years (outdated dependencies).

Reduce these unused dependencies can help prevent introducing bugs/vulnerabilities from dependencies with outdated. Meanwhile, it can minimize the project size. To safely remove redundant dependencies, I constructed a complete call graph (resolved most of Java reflection and dynamic binding), and validated that they have not been used by the client code.

This PR x-springboot:x-springboot:5.0 for removing the redundant dependencies have passed the tests.

Best regards

Redundant dependencies

Redundant direct dependencies:

    org.springframework.boot:spring-boot-configuration-processor:2.7.7:compile [116 KB]

Redundant indirect dependencies:

    org.jetbrains:annotations:13.0:compile [17 KB]
    net.bytebuddy:byte-buddy:1.12.20:compile [3 MB]
    org.jetbrains.kotlin:kotlin-stdlib-jdk7:1.6.21:compile [23 KB]
    io.github.classgraph:classgraph:4.8.83:compile [492 KB]

Outdated dependencies

org.jetbrains:annotations:13.0 (3410 days without maintenance)