Could com.xsh:myblog:0.0.1-SNAPSHOT drop off redundant dependencies? #8
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
Hi, I found that com.xsh:myblog:0.0.1-SNAPSHOT’s pom file introduced 133 dependencies. However, among them, 12 libraries (9% have not been used by your project), the redundant dependencies are listed below.
More seriously, 12 redundant libraries have not been maintained by developers for more than 3 years (outdated dependencies).
Reduce these unused dependencies can help prevent introducing bugs/vulnerabilities from dependencies with outdated. Meanwhile, it can minimize the project size. To safely remove redundant dependencies, I constructed a complete call graph (resolved most of Java reflection and dynamic binding), and validated that they have not been used by the client code.
This PR com.xsh:myblog:0.0.1-SNAPSHOT for removing the redundant dependencies have passed the tests.
Best regards
Redundant dependencies
Redundant direct dependencies:
Redundant indirect dependencies:
Outdated dependencies
com.qiniu:happy-dns-java:0.1.4 (2476 days without maintenance)
org.checkerframework:checker-compat-qual:2.0.0 (2548 days without maintenance)
asm:asm-commons:3.3 (4584 days without maintenance)
net.sf.trove4j:core:3.1.0 (1726 days without maintenance)
asm:asm-tree:3.3 (4584 days without maintenance)
com.google.j2objc:j2objc-annotations:1.1 (2287 days without maintenance)
asm:asm:3.3 (4584 days without maintenance)
com.google.errorprone:error_prone_annotations:2.1.3 (1973 days without maintenance)
org.apache.tomcat:tomcat-juli:8.5.20 (2091 days without maintenance)
com.google.code.findbugs:jsr305:1.3.9 (4991 days without maintenance)
org.codehaus.mojo:animal-sniffer-annotations:1.14 (2980 days without maintenance)
commons-codec:commons-codec:1.10 (3092 days without maintenance)