Github user zentol commented on the issue:
https://github.com/apache/flink/pull/6073
I still don't know whether this is the way to go. The exclusion pattern can
be icky when dealing with a single dependency A that pulls in 2 different
versions of a dependency B. When excluding B you are excluding both versions,
and have to add a separate dependency on B to **our** module. This not only
obfuscates the dependency tree, but also directly blocks other efforts to
forbid usages of unused dependencies.
---