Github user carlosrmng commented on the issue: https://github.com/apache/gora/pull/133 Hi @lewismc I found multiple classes and interfaces that define their own newInstance() method which are not directly affected by the issue. I used my IDE's 'find usages' feature to search for all the Class#newInstance() references within the code, so hopefully I didn't miss anything. Some examples: - [javax.xml.parsers.DocumentBuilderFactory#newInstance()](https://docs.oracle.com/javase/7/docs/api/javax/xml/parsers/DocumentBuilderFactory.html#newInstance()) - [org.apache.gora.persistency.Persistent#newInstance()](https://github.com/apache/gora/blob/dc70b14b542830cee434329cabee1b801ad51254/gora-core/src/main/java/org/apache/gora/persistency/Persistent.java#L115) - [org.apache.gora.goraci.generated.CINode#newInstance()](https://github.com/apache/gora/blob/dc70b14b542830cee434329cabee1b801ad51254/gora-goraci/src/main/java/org/apache/gora/goraci/generated/CINode.java#L342)
---