On 2017-05-18 08:13, Carsten Ziegeler wrote:
Julian Reschke wrote
Seen in the POM:
<dependency><groupId>org.apache.jackrabbit</groupId><artifactId>jackrabbit-jcr-commons</artifactId><version>1.6.0</version><scope>provided</scope></dependency>
Why 1.6.0? It has been EOL'd many years ago...
Is something we use from that version broken? :)
We embed two classes from that jar, no runtime dependency.
...
...which makes it actually worse. It's unmaintained code, after all.
(FWIW, why embed???)
Best regards, Julian
