[ 
https://issues.apache.org/jira/browse/TIKA-4532?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=18033835#comment-18033835
 ] 

Vladimir Sitnikov commented on TIKA-4532:
-----------------------------------------

There's an issue with public API though. There are some places where 
{{MutableInt}} and {{Pair}} are used in the public API:
* 
https://github.com/apache/tika/blob/2021e713869eb981448d081759d877312a2fb653/tika-eval/tika-eval-core/src/main/java/org/apache/tika/eval/core/textstats/UnicodeBlockCounter.java#L30
* 
https://github.com/apache/tika/blob/2021e713869eb981448d081759d877312a2fb653/tika-eval/tika-eval-core/src/main/java/org/apache/tika/eval/core/tokens/CommonTokenCountManager.java#L93

It looks like commons-lang3 types were not great for those cases though.

> Drop commons-lang3 dependency
> -----------------------------
>
>                 Key: TIKA-4532
>                 URL: https://issues.apache.org/jira/browse/TIKA-4532
>             Project: Tika
>          Issue Type: Improvement
>    Affects Versions: 3.2.3
>            Reporter: Vladimir Sitnikov
>            Priority: Major
>
> Currently, there are only a few commons-lang3 usages in apache tika (see 
> https://github.com/search?q=repo%3Aapache%2Ftika%20commons.lang3&type=code ), 
> and it would be great if 
> commons-lang3 is a big dependency with lots of stuff, and it is unfortunate 
> to get CVEs  via commons-lang3: 
> https://mvnrepository.com/artifact/org.apache.commons/commons-lang3
> See https://github.com/apache/maven-doxia/issues/1006



--
This message was sent by Atlassian Jira
(v8.20.10#820010)

Reply via email to