Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Could x-springboot:x-springboot:5.0 drop off redundant dependencies? #31

Open
wants to merge 1 commit into
base: master
Choose a base branch
from

Conversation

slimming-fat
Copy link

@slimming-fat slimming-fat commented Apr 19, 2023

image
image
image

Hi, I found that x-springboot:x-springboot:5.0’s pom file introduced 119 dependencies. However, among them,5 libraries (4% have not been used by your project), the redundant dependencies are listed below.

More seriously, 1 redundant library has not been maintained by developers for more than 3 years (outdated dependencies).

Reduce these unused dependencies can help prevent introducing bugs/vulnerabilities from dependencies with outdated. Meanwhile, it can minimize the project size. To safely remove redundant dependencies, I constructed a complete call graph (resolved most of Java reflection and dynamic binding), and validated that they have not been used by the client code.

This PR x-springboot:x-springboot:5.0 for removing the redundant dependencies have passed the tests.

Best regards

Redundant dependencies

Redundant direct dependencies:

    org.springframework.boot:spring-boot-configuration-processor:2.7.7:compile [116 KB]

Redundant indirect dependencies:

    org.jetbrains:annotations:13.0:compile [17 KB]
    net.bytebuddy:byte-buddy:1.12.20:compile [3 MB]
    org.jetbrains.kotlin:kotlin-stdlib-jdk7:1.6.21:compile [23 KB]
    io.github.classgraph:classgraph:4.8.83:compile [492 KB]

Outdated dependencies

org.jetbrains:annotations:13.0 (3410 days without maintenance)

@slimming-fat slimming-fat closed this by deleting the head repository Aug 3, 2023
@slimming-fat slimming-fat reopened this Aug 4, 2023
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

None yet

1 participant