Could com.yami.shop:yami-shop-admin:0.0.1-SNAPSHOT drop off redundant dependencies? #18
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
Hi, I found that com.yami.shop:yami-shop-admin:0.0.1-SNAPSHOT’s pom file introduced 193 dependencies. However, among them, 15 libraries (8% have not been used by your project), the redundant dependencies are listed below.
More seriously, 7 redundant libraries have not been maintained by developers for more than 3 years (outdated dependencies).
Reduce these unused dependencies can help prevent introducing bugs/vulnerabilities from dependencies with outdated. Meanwhile, it can minimize the project size. To safely remove redundant dependencies, I constructed a complete call graph (resolved most of Java reflection and dynamic binding), and validated that they have not been used by the client code.
This PR com.yami.shop:yami-shop-admin:0.0.1-SNAPSHOT for removing the redundant dependencies have passed the tests.
Best regards
Redundant dependencies
Redundant indirect dependencies:
Redundant direct dependencies inherited from parent pom:
Outdated dependencies
org.jetbrains:annotations:13.0 (3403 days without maintenance)
javax.xml.bind:jaxb-api:2.1 (5672 days without maintenance)
javax.activation:activation:1.1 (6188 days without maintenance)
org.ini4j:ini4j:0.5.4 (2976 days without maintenance)
com.aliyun:aliyun-java-sdk-core:4.3.9 (1475 days without maintenance)
javax.xml.stream:stax-api:1.0-2 (5302 days without maintenance)
com.aliyun:aliyun-java-sdk-dysmsapi:1.1.0 (1889 days without maintenance)