Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Could io.github.scouter-project:scouter-webapp:2.17.1 drop off redundant dependencies? #925

Open
wants to merge 2 commits into
base: master
Choose a base branch
from

Conversation

slimming-fat
Copy link

1
2
3

Hi, I found that io.github.scouter-project:scouter-webapp:2.17.1’s pom file introduced 100 dependencies. However, among them, 6 libraries (6% have not been used by your project), the redundant dependencies are listed below.

6 redundant libraries have not been maintained by developers for more than 3 years(outdated dependencies).

Reduce these unused dependencies can help prevent introducing bugs/vulnerabilities from outdated dependencies. Meanwhile, it can minimize the project size. To safely remove redundant dependencies, I constructed a complete call graph (resolved most of Java reflection and dynamic binding) , and validated that they have not been used by the client code.

This PR io.github.scouter-project:scouter-webapp:2.17.1 for removing the redundant dependencies have passed the tests.

Best regards

Redundant dependencies

Redundant direct dependencies:

  javax.activation:activation:1.1.1:compile [67 KB]

Redundant indirect dependencies:

     org.ow2.asm:asm-tree:5.1:compile [28 KB]
     org.jboss.logging:jboss-logging:3.1.3.GA:compile [55 KB]
     com.fasterxml:classmate:1.0.0:compile [58 KB]
     org.ow2.asm:asm-commons:5.1:compile [46 KB]
     org.ow2.asm:asm:5.1:compile [52 KB]  

Outdated dependencies

org.jboss.logging:jboss-logging:3.1.3.GA ( 3653 days without maintenance)
com.fasterxml:classmate:1.0.0 ( 3429 days without maintenance)
org.ow2.asm:asm:5.1 ( 2558 days without maintenance)
javax.activation:activation:1.1.1 ( 4882 days without maintenance)
org.ow2.asm:asm-tree:5.1 ( 2558 days without maintenance)
org.ow2.asm:asm-commons:5.1 ( 2558 days without maintenance)

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

1 participant