Hello Everyone,The last commits related to druid were around early 2020[1]Since
then the version of Druid used by hive has remained the same 0.17.1[2]Druid
version 0.17.1 has a significant number of CVEs
<https://mvnrepository.com/artifact/org.apache.druid/druid/0.17.1> associated
with it and some of which allow remote code execution.If no one is
maintaining it or plan to do so in near future, Can we remove it from our
code?Thoughts?-Simhadri[1]
https://github.com/apache/hive/search?o=desc&q=druid&s=committer-date&type=commits
[2]
https://github.com/apache/hive/blob/0033675057a60d0a05a252854455e2b8835e89cc/pom.xml#L127
