[ 
https://issues.apache.org/jira/browse/CRUNCH-633?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16984203#comment-16984203
 ] 

Gabriel Reid commented on CRUNCH-633:
-------------------------------------

Updated the fix version, thanks for pointing that out [~noslowerdna]

> Remove the commons-httpclient:commons-httpclient dependency
> -----------------------------------------------------------
>
>                 Key: CRUNCH-633
>                 URL: https://issues.apache.org/jira/browse/CRUNCH-633
>             Project: Crunch
>          Issue Type: Bug
>            Reporter: Gergő Pásztor
>            Assignee: Gergő Pásztor
>            Priority: Major
>             Fix For: 1.0.0
>
>         Attachments: CRUNCH-633_v1.patch
>
>
> We are using the commons-httpclient:commons-httpclient dependency for the 
> integration tests to support the Hadoop's LocalJobRunner. It was added 
> because it is a dependency of MapReduce, but it was not in the client jar at 
> that time. It's not the case anymore.
> I tried to remove this first-level dependency and all test passed locally so 
> I think we can remove this without any issue. The other dependencies (hadoop, 
> hive, hbase) coming with their commons-httpclient correctly.
> Side note:
> The lib is not maintained from 2011(?) and has some security issues.
> http://hc.apache.org/httpclient-3.x/
> "The Commons HttpClient project is now end of life, and is no longer being 
> developed."
> I hope that the other projects throwing out this lib later.



--
This message was sent by Atlassian Jira
(v8.3.4#803005)

Reply via email to