Could software.amazon.awssdk:build-tools:1.0 drop off redundant dependencies?

[Celebrate-future]

Hi! I found the pom file of project software.amazon.awssdk:build-tools:1.0 introduced 33 dependencies. However, among them, 5 libraries (15%) are not used by your project. I list the redundant dependencies below (labelled as red ones in the figure):

Redundant dependencies

com.google.code.findbugs:jsr305:jar:3.0.2:compile
net.jcip:jcip-annotations:jar:1.0:compile
com.google.guava:listenablefuture:jar:9999.0-empty-to-avoid-conflict-with-guava:compile
com.google.j2objc:j2objc-annotations:jar:1.3:compile
com.google.errorprone:error_prone_annotations:jar:2.5.1:compile

Outdated dependencies

com.google.j2objc:j2objc-annotations:1.3 (2383 days without maintenance)
net.jcip:jcip-annotations:1.0 (5463 days without maintenance)

---

Removing the redundant dependencies can reduce the size of project and prevent potential dependency conflict issues (i.e., multiple versions of the same library). More importantly, one of the redundant dependencies com.google.code.findbugs:jsr305:jar:3.0.2:compile induced dependency conflict in the dependency graph. As such, I suggest a refactoring operation for software.amazon.awssdk:build-tools:1.0’s pom file.

The attached PR helps resolve the reported problem. It is safe to remove the unused libraries (we considered Java reflection relations when analyzing the dependencies). These changes have passed software.amazon.awssdk:build-tools:1.0’s maven tests.

Best regards

[sonarqubecloud]

Kudos, SonarCloud Quality Gate passed!   

0 Bugs
0 Vulnerabilities
0 Security Hotspots
0 Code Smells

No Coverage information
0.0% Duplication