[
https://issues.apache.org/jira/browse/TIKA-4532?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=18033934#comment-18033934
]
Vladimir Sitnikov commented on TIKA-4532:
-----------------------------------------
{quote}Even if we removed it from Tika, can we exclude it safely from those
dependencies?{quote}
Asking commons-compress to drop dependency on commons-lang would be tough :)
I will probably try to ask dev@commons to release commons-stringutils.jar. It
might be good enough replacement for most of the current commons-lang usages.
{quote} If there is a useful way forward, start with this branch and open a
PR{quote}
Great!
> Drop commons-lang3 dependency
> -----------------------------
>
> Key: TIKA-4532
> URL: https://issues.apache.org/jira/browse/TIKA-4532
> Project: Tika
> Issue Type: Improvement
> Affects Versions: 3.2.3
> Reporter: Vladimir Sitnikov
> Priority: Major
>
> Currently, there are only a few commons-lang3 usages in apache tika (see
> https://github.com/search?q=repo%3Aapache%2Ftika%20commons.lang3&type=code ),
> and it would be great if
> commons-lang3 is a big dependency with lots of stuff, and it is unfortunate
> to get CVEs via commons-lang3:
> https://mvnrepository.com/artifact/org.apache.commons/commons-lang3
> See https://github.com/apache/maven-doxia/issues/1006
--
This message was sent by Atlassian Jira
(v8.20.10#820010)
