Am 27.07.2020 um 20:51 schrieb Eric Norman:
Hi Julian,
In reviewing the history, it looks like the dependency on oak-core was
first introduced to resolve SLING-7886 and SLING-7887 via the commit at
[3]. If I recall correctly, that 1.6.x version of oak was the version that
was being used in the sling starter (version 10'ish) at the time so I chose
that as the minimum version to depend on. As far as I can tell, the code
being utilized here is still compatible with the latest version of oak so
there hasn't been any reason to change the minimum version yet.
I suppose we could now change that dependency
to org.apache.jackrabbit:oak-security-spi instead as long as everyone is
comfortable with moving the minimum version of oak up to version 1.8 or
later?
...
AFAIU, nobody should have direct references on oak-core other than other
Oak components. These APIs are not considered public.
If there's a problem with that, we should fix that in Oak.
Best regards, Julian
