aherbert commented on a change in pull request #108: Refactor 
ByteArrayOutputStream into synchronized and non-synchronized versions
URL: https://github.com/apache/commons-io/pull/108#discussion_r402993724
 
 

 ##########
 File path: pom.xml
 ##########
 @@ -226,6 +230,11 @@ file comparators, endian transformation classes, and much 
more.
   </contributors>
 
   <dependencies>
+    <dependency>
+      <groupId>com.google.code.findbugs</groupId>
+      <artifactId>jsr305</artifactId>
 
 Review comment:
   I would remove it from this PR. Adding an annotation dependency should be in 
another PR that perhaps then makes more use of it than a single location. The 
Guava codebase uses these throughout and in that case they have value for a bug 
detection tool. I don't think a single annotation of `@ThreadSafe` is likely to 
detect many (any?) bugs given that synchronized code should be less of a 
problem than unsynchronized code. If you do have a bug detection tool that 
flags this class as a problem when used in a concurrent scenario a brief look 
at the javadoc (which notes this is safe for concurrent use) will allow you to 
mark the bug as false positive.

----------------------------------------------------------------
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
 
For queries about this service, please contact Infrastructure at:
[email protected]


With regards,
Apache Git Services

Reply via email to