Skip to content

Consider removal of Guava from java-json-tools repos #11

Open
@Capstan

Description

@Capstan

Spurred by @soberich in pr #3 and @trajano in fge/uri-template#4:

  • Guava is heavyweight for small web apps.
  • Guava does deprecate and remove classes/methods/enums/etc., and this limits the ability of clients of these libraries to use a more modern Guava unless we keep up.
  • A CVE in Guava has been a forcing function to use a more modern Guava.
  • Guava itself may force upon this project minimum JDK standards.

Guava is currently used in this repo, in https://github.com/java-json-tools/json-schema-core, and in https://github.com/fge/uri-template, which is a dependency of -core. Not sure if we should consider them separately or not, but -core cannot be rid of a transitive Guava dependency without all of them being rid of Guava.

/cc @huggsboson

Metadata

Metadata

Assignees

No one assigned

    Labels

    enhancementNew feature or request

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions