Github user MikeThomsen commented on the issue:
https://github.com/apache/nifi/pull/3007
@joewitt I noticed that it adds bouncy castle and jbCrypt. These are
transitive depdenencies that come in from security-utils. Should the be added
to L&N?
```
[INFO] org.apache.nifi:nifi-splunk-nar:nar:1.8.0-SNAPSHOT
[INFO] +- org.apache.nifi:nifi-splunk-processors:jar:1.8.0-SNAPSHOT:compile
[INFO] | +- com.splunk:splunk:jar:1.6.3.0:compile
[INFO] | \- org.apache.nifi:nifi-processor-utils:jar:1.8.0-SNAPSHOT:compile
[INFO] | +- org.apache.nifi:nifi-utils:jar:1.8.0-SNAPSHOT:compile
[INFO] | | \- org.apache.nifi:nifi-api:jar:1.8.0-SNAPSHOT:provided
[INFO] | +-
org.apache.nifi:nifi-security-utils:jar:1.8.0-SNAPSHOT:compile
[INFO] | | +- org.apache.commons:commons-lang3:jar:3.7:compile
[INFO] | | +- commons-codec:commons-codec:jar:1.11:compile
[INFO] | | +- org.bouncycastle:bcprov-jdk15on:jar:1.59:compile
[INFO] | | +- org.bouncycastle:bcpkix-jdk15on:jar:1.59:compile
[INFO] | | +-
org.apache.nifi:nifi-properties:jar:1.8.0-SNAPSHOT:provided
[INFO] | | \- de.svenkubiak:jBCrypt:jar:0.4.1:compile
[INFO] | +- commons-io:commons-io:jar:2.6:compile
[INFO] | \-
com.fasterxml.jackson.core:jackson-databind:jar:2.9.5:compile
[INFO] | +-
com.fasterxml.jackson.core:jackson-annotations:jar:2.9.0:compile
[INFO] | \- com.fasterxml.jackson.core:jackson-core:jar:2.9.5:compile
[INFO] +-
org.apache.nifi:nifi-standard-services-api-nar:nar:1.8.0-SNAPSHOT:compile
```
---