[ 
https://issues.apache.org/jira/browse/ARTEMIS-4349?focusedWorklogId=869649&page=com.atlassian.jira.plugin.system.issuetabpanels:worklog-tabpanel#worklog-869649
 ]

ASF GitHub Bot logged work on ARTEMIS-4349:
-------------------------------------------

                Author: ASF GitHub Bot
            Created on: 06/Jul/23 18:48
            Start Date: 06/Jul/23 18:48
    Worklog Time Spent: 10m 
      Work Description: clebertsuconic commented on PR #4540:
URL: 
https://github.com/apache/activemq-artemis/pull/4540#issuecomment-1624158604

   any idea how active is Caffeine? more specifically how good are them with 
fixing CVEs?
   
   
   there was a couple of CVEs in the past with guava.  
https://www.cvedetails.com/product/52274/Google-Guava.html?vendor_id=1224 and 
we had to update the version before.
   
   my concern with the replacement is how good would be fix things like these?




Issue Time Tracking
-------------------

    Worklog Id:     (was: 869649)
    Time Spent: 20m  (was: 10m)

> Replace Guava cache with Caffeine
> ---------------------------------
>
>                 Key: ARTEMIS-4349
>                 URL: https://issues.apache.org/jira/browse/ARTEMIS-4349
>             Project: ActiveMQ Artemis
>          Issue Type: Improvement
>    Affects Versions: 2.29.0
>            Reporter: Alexey Markevich
>            Priority: Major
>          Time Spent: 20m
>  Remaining Estimate: 0h
>
> based on benchmark https://github.com/ben-manes/caffeine/wiki/Benchmarks



--
This message was sent by Atlassian Jira
(v8.20.10#820010)

Reply via email to