reschke commented on PR #2945: URL: https://github.com/apache/jackrabbit-oak/pull/2945#issuecomment-4710177021
> And if it's such a crazy idea, why would this even exist ? Ahem? Seriously??? The problem is that scanners like these tend to report false positives. Uncritically acting on these actually can cause new problems, not to mention it creates noise in the POMs which is hard to maintain. Such as excluding things that might go away anyway (transitive Guava dependencies, for instance). Or considering annotation processors (errorprone) that are only used at compile time of the dependency. -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected]
