[
https://issues.apache.org/jira/browse/KAFKA-15203?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17849904#comment-17849904
]
Chia-Ping Tsai commented on KAFKA-15203:
----------------------------------------
[~ganesh_6] Thanks for all great sharing. IIRC, KIP-898 introduces a new way to
load plugins dynamically, and new way could be not compatible to previous way
of loading plugins. For example, the connector jars which don't offer meta-inf
(or module-info) can't be found dynamically, and that is why KIP-898 added the
`PluginDiscoveryMode` to define the "discovery mode". `HYBRID_WARN` is the
default value and it run both scanners to keep the compatibility.
In short, connector users need to migrate to new way to declare their plugins,
and we can remove `ReflectionScanner` after that. The timeline looks like this:
kafka 4: add more deprecation to "encourage" connector users to migrate
kafka 5: remove `PluginDiscoveryMode` as we load plugins by serviceLoad only.
> Remove dependency on Reflections
> ---------------------------------
>
> Key: KAFKA-15203
> URL: https://issues.apache.org/jira/browse/KAFKA-15203
> Project: Kafka
> Issue Type: Bug
> Components: connect
> Reporter: Divij Vaidya
> Assignee: Ganesh Sadanala
> Priority: Major
> Labels: newbie
> Fix For: 5.0.0
>
>
> We currently depend on reflections library which is EOL. Quoting from the
> GitHub site:
> _> Please note: Reflections library is currently NOT under active development
> or maintenance_
>
> This poses a supply chain risk for our project where the security fixes and
> other major bugs in underlying dependency may not be addressed timely.
> Hence, we should plan to remove this dependency.
--
This message was sent by Atlassian Jira
(v8.20.10#820010)
