Re: Update 3rd party dependencies

2017-07-05 Thread Mike Percy
Hi Attila, Thanks for sending this. I have a few thoughts / questions on this: 1) You didn't include the analysis of A,G,S, etc. for the listed dependencies in your email. 2) If there are security vulnerabilities reported that could affect Flume then we should upgrade those dependencies where

Update 3rd party dependencies

2017-07-04 Thread Attila Simon
Hi, My colleague made a through analysis on our library dependencies and classified them using the following notation: G = Good - we're on the latest version M = Mostly good - we're only a patch version behind O = Old - not on latest version, but on same major version B = Bad - one or more