[
https://issues.apache.org/jira/browse/TIKA-3003?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17406763#comment-17406763
]
Tim Allison commented on TIKA-3003:
-----------------------------------
Thank you for the ping. I've made the changes locally, and I'm waiting for a
clean build before pushing.
I plan to do this only in the main/2.x branch. I have no plans to backport to
1.x unless there's a need.
> Remove unused dependencies
> --------------------------
>
> Key: TIKA-3003
> URL: https://issues.apache.org/jira/browse/TIKA-3003
> Project: Tika
> Issue Type: Improvement
> Components: parser
> Affects Versions: 2.0.0
> Reporter: César Soto Valero
> Priority: Minor
> Fix For: 2.0.0-BETA
>
>
> I noticed that dependency *org.jsoup:jsoup:1.12.1* is declared in module
> *tika-parsers* to prevent from having a vulnerable version from
> *edu.ucar:grib*. However, this dependency is not used and, therefore, it can
> be removed to make the pom clearer and the dependency tree of this module
> complex.
> In addition, dependency *net.sf.ehcache:ehcache-core*, induced transitively
> from *edu.ucar:cdm:4.5.5*, is not used and can be excluded safely. Notice
> that the size of the jar of *ehcache-core* is around 1.3MB, thus removing it
> has a positive impact on the size of *tika-parsers*.
--
This message was sent by Atlassian Jira
(v8.3.4#803005)
