Skip to content

Commit 7a72011

Browse files
committed
build: do not expose gson+guava to consumers
- it makes alpinecore bring in vulnerable transitive dependencies - spigot already brings in gson/guava - if someone is building plugins with alpinecore, they will compileOnly spigot or their own version of guava/gson anyway
1 parent 472e8e5 commit 7a72011

File tree

1 file changed

+0
-4
lines changed

1 file changed

+0
-4
lines changed

bukkit/build.gradle.kts

Lines changed: 0 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -22,11 +22,7 @@ dependencies {
2222
api(libs.adventure.platform.bukkit)
2323
api(libs.configlib.spigot)
2424
api(libs.litecommands.bukkit)
25-
compileOnlyApi(libs.gson)
26-
compileOnlyApi(libs.guava)
2725
compileOnly(libs.spigot.api) {
28-
exclude(libs.gson.get().group)
29-
exclude(libs.guava.get().group)
3026
exclude("junit")
3127
exclude("org.yaml", "snakeyaml")
3228
}

0 commit comments

Comments
 (0)