ppkarwasz opened a new pull request, #61: URL: https://github.com/apache/commons-xml/pull/61
Adds a `shading.md` site page documenting that the `Secure*` entry points are designed as independent shade closures: - a table of per-entry-point shaded size estimates (uncompressed closure bytes from the sets pinned by `ShadingFootprintTest`, scaled by the jar's overall compression ratio; measured on 1.0.0), - the security trade-offs of the three consumption models (external dependency, recommended; shaded copy; vendored code and copy-pasted recipes, with `throw on unsupported properties` and `newDefaultInstance()` as mitigations), - a `maven-shade-plugin` configuration that relocates `commons-xml` alone while leaving other dependencies external. Also fixes `ShadingFootprintTest.reportFootprint()` to compute its percentages against the union of all entry-point closures, matching its "% of full library" header (previously it divided by the DOM closure only). The page follows the site conventions: semantic line breaks, ASF license header, `.html` cross-links; `site.xml` gains a "Shading" menu item. Verified with `mvn test -Dtest=ShadingFootprintTest`, `mvn apache-rat:check`, and a full `mvn site` render. 🤖 Generated with [Claude Code](https://claude.com/claude-code) https://claude.ai/code/session_01MbfpcsKig16HfSe6jGhcvh -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected]
