I would prefer not to add a shaded jar if it is not really needed.



Il Dom 23 Feb 2020, 11:57 Vladimir Sitnikov <[email protected]>
ha scritto:

> > Here the GSON library is only one
>
> https://github.com/FasterXML/jackson-jr is 100KiB or so.
> Have you checked it?
>

This is very interesting

Jackson Databind is famous for a long list of CVEs, I have never seen this
'small version' maybe it is worth to check.

Again, if we don't need, let's step away from adding a new library.

Why not using XML and built in java support?

In this specific case, surefire, I think that we don't even need it as the
TCP work has already been mostly completed


Enrico

>
> Vladimir
>

Reply via email to