Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Is the Kotlin Scripting JVM dependency actually needed? #26

Open
arekolek opened this issue Feb 25, 2021 · 1 comment
Open

Is the Kotlin Scripting JVM dependency actually needed? #26

arekolek opened this issue Feb 25, 2021 · 1 comment

Comments

@arekolek
Copy link

arekolek commented Feb 25, 2021

I'm wondering what is the 'org.jetbrains.kotlin:kotlin-scripting-jvm:1.3.11' dependency used for and do I need it on my runtime classpath when I use this library.

I downloaded this repository, commented out that dependency and ran ./gradlew clean assemble and build succeeded, so maybe it's not needed?

Edit: also executed all the tests and they ran fine.

It pulls in dependencies with known security vulnerabilities, which I'd prefer to avoid: https://nvd.nist.gov/vuln/search/results?form_type=Advanced&results_type=overview&search_type=all&cpe_vendor=cpe%3A%2F%3Ajetbrains&cpe_product=cpe%3A%2F%3Ajetbrains%3Akotlin

@ubuntudroid
Copy link

They should not be necessary from what I see. You can exclude them via

implementation('io.ashdavies.rx.rxtasks:rx-tasks:2.2.0') {
    exclude group: 'org.jetbrains.kotlin', module: 'kotlin-scripting-jvm'
}

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

2 participants