Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Could com.yami.shop:yami-shop-admin:0.0.1-SNAPSHOT drop off redundant dependencies? #18

Open
wants to merge 1 commit into
base: master
Choose a base branch
from

Conversation

slimming-fat
Copy link

image
image
image
image
image
image

Hi, I found that com.yami.shop:yami-shop-admin:0.0.1-SNAPSHOT’s pom file introduced 193 dependencies. However, among them, 15 libraries (8% have not been used by your project), the redundant dependencies are listed below.

More seriously, 7 redundant libraries have not been maintained by developers for more than 3 years (outdated dependencies).

Reduce these unused dependencies can help prevent introducing bugs/vulnerabilities from dependencies with outdated. Meanwhile, it can minimize the project size. To safely remove redundant dependencies, I constructed a complete call graph (resolved most of Java reflection and dynamic binding), and validated that they have not been used by the client code.

This PR com.yami.shop:yami-shop-admin:0.0.1-SNAPSHOT for removing the redundant dependencies have passed the tests.

Best regards

Redundant dependencies

Redundant indirect dependencies:

    org.jetbrains:annotations:13.0:compile [17 KB]
    javax.xml.bind:jaxb-api:2.1:compile [87 KB]
    com.github.virtuald:curvesapi:1.07:compile [109 KB]
    org.jboss.marshalling:jboss-marshalling-river:2.0.11.Final:compile [86 KB]
    javax.activation:activation:1.1:compile [61 KB]
    javax.xml.stream:stax-api:1.0-2:compile [22 KB]
    org.jboss.marshalling:jboss-marshalling:2.0.11.Final:compile [218 KB]
    com.aliyun:aliyun-java-sdk-dysmsapi:1.1.0:compile [20 KB]
    org.checkerframework:checker-qual:3.12.0:compile [203 KB]
    com.aliyun:aliyun-java-sdk-core:4.3.9:compile [171 KB]
    com.google.errorprone:error_prone_annotations:2.11.0:compile [15 KB]
    com.mysql:mysql-connector-j:8.0.32:compile [2 MB]
    org.jsoup:jsoup:1.15.3:compile [427 KB]
    org.ini4j:ini4j:0.5.4:compile [99 KB]

Redundant direct dependencies inherited from parent pom:

    org.springframework.boot:spring-boot-configuration-processor:3.0.4:compile [118 KB]

Outdated dependencies

org.jetbrains:annotations:13.0 (3403 days without maintenance)
javax.xml.bind:jaxb-api:2.1 (5672 days without maintenance)
javax.activation:activation:1.1 (6188 days without maintenance)
org.ini4j:ini4j:0.5.4 (2976 days without maintenance)
com.aliyun:aliyun-java-sdk-core:4.3.9 (1475 days without maintenance)
javax.xml.stream:stax-api:1.0-2 (5302 days without maintenance)
com.aliyun:aliyun-java-sdk-dysmsapi:1.1.0 (1889 days without maintenance)

@slimming-fat slimming-fat closed this by deleting the head repository Aug 3, 2023
@slimming-fat slimming-fat reopened this Aug 4, 2023
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

None yet

1 participant