[SOLR-16006] Audit declared/unused dependencies

• Type: Task
• Status: Closed
• Priority: Major
• Resolution: Fixed
• Fix Version/s: 9.0
• Component/s: Build
• Assignee: Kevin Risden
• Reporter: Mike Drob
• Created: 11/Feb/22 22:15
• Updated: 12/May/22 00:26
• Resolved: 15/Feb/22 00:35

Description

Noting this down for future reference, this is the current list that gradle outputs scary warnings over:

I have made no attempts to determine yet how many of these are real or how many are false positive.

> Task :solr:webapp:analyzeClassesDependencies
Dependency analysis found issues.
unusedDeclaredArtifacts
 - org.apache.solr:core:10.0.0-SNAPSHOT@

> Task :solr:modules:clustering:analyzeClassesDependencies
Dependency analysis found issues.
unusedDeclaredArtifacts
 - commons-io:commons-io:2.8.0@jar
 - org.apache.lucene:lucene-analysis-common:9.0.0@jar

> Task :solr:modules:jaegertracer-configurator:analyzeClassesDependencies
Dependency analysis found issues.
unusedDeclaredArtifacts
 - io.jaegertracing:jaeger-thrift:1.6.0@jar

> Task :solr:modules:jwt-auth:analyzeClassesDependencies
Dependency analysis found issues.
unusedDeclaredArtifacts
 - com.fasterxml.jackson.core:jackson-databind:2.13.1@jar
 - org.apache.commons:commons-lang3:3.9@jar

> Task :solr:modules:gcs-repository:analyzeClassesDependencies
Dependency analysis found issues.
unusedDeclaredArtifacts
 - com.google.api-client:google-api-client:1.32.1@jar
 - com.google.api.grpc:proto-google-common-protos:2.1.0@jar
 - com.google.api.grpc:proto-google-iam-v1:1.0.10@jar
 - com.google.api:api-common:1.10.1@jar
 - com.google.api:gax-httpjson:0.79.0@jar
 - com.google.apis:google-api-services-storage:v1-rev20210127-1.31.0@jar
 - com.google.auth:google-auth-library-credentials:0.24.1@jar
 - com.google.code.gson:gson:2.8.6@jar
 - com.google.guava:guava:25.1-jre@jar
 - com.google.http-client:google-http-client-appengine:1.39.0@jar
 - com.google.http-client:google-http-client-jackson2:1.39.0@jar
 - com.google.http-client:google-http-client:1.39.2@jar
 - com.google.j2objc:j2objc-annotations:1.3@jar
 - com.google.oauth-client:google-oauth-client:1.32.1@jar
 - com.google.protobuf:protobuf-java-util:3.15.5@jar
 - com.google.protobuf:protobuf-java:3.15.5@jar
 - io.grpc:grpc-context:1.36.0@jar
 - io.opencensus:opencensus-api:0.28.0@jar
 - io.opencensus:opencensus-contrib-http-util:0.28.0@jar

> Task :solr:modules:ltr:analyzeClassesDependencies
Dependency analysis found issues.
unusedDeclaredArtifacts
 - commons-io:commons-io:2.8.0@jar
 - org.apache.lucene:lucene-analysis-common:9.0.0@jar

> Task :solr:modules:langid:analyzeClassesDependencies
Dependency analysis found issues.
unusedDeclaredArtifacts
 - net.arnx:jsonic:1.2.7@jar

> Task :solr:modules:analysis-extras:analyzeClassesDependencies
Dependency analysis found issues.
unusedDeclaredArtifacts
 - org.apache.lucene:lucene-analysis-morfologik:9.0.0@jar
 - org.apache.lucene:lucene-analysis-smartcn:9.0.0@jar
 - org.apache.lucene:lucene-analysis-stempel:9.0.0@jar

> Task :solr:modules:jwt-auth:analyzeTestClassesDependencies
Dependency analysis found issues.
unusedDeclaredArtifacts
 - io.netty:netty-codec-http:4.1.68.Final@jar

> Task :solr:modules:hdfs:analyzeClassesDependencies
Dependency analysis found issues.
unusedDeclaredArtifacts
 - org.apache.hadoop:hadoop-annotations:3.2.0@jar
 - org.apache.hadoop:hadoop-auth:3.2.0@jar

> Task :solr:test-framework:analyzeClassesDependencies
Dependency analysis found issues.
unusedDeclaredArtifacts
 - com.github.spotbugs:spotbugs-annotations:4.5.3@jar
 - commons-cli:commons-cli:1.4@jar
 - org.apache.lucene:lucene-analysis-common:9.0.0@jar
 - org.bitbucket.b_c:jose4j:0.7.9@jar

> Task :solr:modules:s3-repository:analyzeClassesDependencies
Dependency analysis found issues.
unusedDeclaredArtifacts
 - commons-io:commons-io:2.8.0@jar
 - software.amazon.awssdk:protocol-core:2.17.63@jar

> Task :solr:solrj:analyzeTestClassesDependencies
Dependency analysis found issues.
unusedDeclaredArtifacts
 - org.apache.logging.log4j:log4j-slf4j-impl:2.17.1@jar

> Task :solr:modules:hdfs:analyzeTestClassesDependencies
Dependency analysis found issues.
unusedDeclaredArtifacts
 - org.apache.hadoop:hadoop-minikdc:3.2.0@jar
 - org.apache.logging.log4j:log4j-1.2-api:2.17.1@jar
 - org.apache.solr:analysis-extras:10.0.0-SNAPSHOT@
 - org.apache.zookeeper:zookeeper:3.7.0@jar

> Task :solr:modules:extraction:analyzeClassesDependencies
Dependency analysis found issues.
unusedDeclaredArtifacts
 - com.adobe.xmp:xmpcore:5.1.3@jar
 - com.drewnoakes:metadata-extractor:2.11.0@jar
 - com.epam:parso:2.0.11@jar
 - com.github.virtuald:curvesapi:1.06@jar
 - com.googlecode.juniversalchardet:juniversalchardet:1.0.3@jar
 - com.googlecode.mp4parser:isoparser:1.1.22@jar
 - com.healthmarketscience.jackcess:jackcess-encrypt:3.0.0@jar
 - com.healthmarketscience.jackcess:jackcess:3.0.1@jar
 - com.ibm.icu:icu4j:68.2@jar
 - com.pff:java-libpst:0.8.1@jar
 - com.rometools:rome-utils:1.12.2@jar
 - com.rometools:rome:1.12.2@jar
 - de.l3s.boilerpipe:boilerpipe:1.1.0@jar
 - org.apache.commons:commons-collections4:4.4@jar
 - org.apache.commons:commons-compress:1.21@jar
 - org.apache.commons:commons-csv:1.7@jar
 - org.apache.pdfbox:fontbox:2.0.24@jar
 - org.apache.pdfbox:jempbox:1.8.16@jar
 - org.apache.pdfbox:pdfbox-tools:2.0.24@jar
 - org.apache.pdfbox:pdfbox:2.0.24@jar
 - org.apache.poi:poi-ooxml-schemas:4.1.1@jar
 - org.apache.poi:poi-scratchpad:4.1.1@jar
 - org.apache.xmlbeans:xmlbeans:3.1.0@jar
 - org.aspectj:aspectjrt:1.8.0@jar
 - org.bouncycastle:bcmail-jdk15on:1.70@jar
 - org.bouncycastle:bcpkix-jdk15on:1.70@jar
 - org.bouncycastle:bcprov-jdk15on:1.70@jar
 - org.brotli:dec:0.1.2@jar
 - org.ccil.cowan.tagsoup:tagsoup:1.2.1@jar
 - org.gagravarr:vorbis-java-core:0.8@jar
 - org.gagravarr:vorbis-java-tika:0.8@jar
 - org.jdom:jdom2:2.0.6@jar
 - org.tallison:jmatio:1.5@jar
 - org.tukaani:xz:1.8@jar

> Task :solr:core:analyzeClassesDependencies
Dependency analysis found issues.
unusedDeclaredArtifacts
 - com.github.spotbugs:spotbugs-annotations:4.5.3@jar
 - org.apache.calcite.avatica:avatica-core:1.18.0@jar
 - org.apache.hadoop:hadoop-annotations:3.2.0@jar
 - org.apache.lucene:lucene-analysis-kuromoji:9.0.0@jar
 - org.apache.lucene:lucene-analysis-nori:9.0.0@jar
 - org.apache.lucene:lucene-analysis-phonetic:9.0.0@jar
 - org.apache.lucene:lucene-backward-codecs:9.0.0@jar
 - org.apache.solr:server:10.0.0-SNAPSHOT@

:solr:core:analyzeTestClassesDependencies
Dependency analysis found issues.
unusedDeclaredArtifacts
 - org.apache.lucene:lucene-analysis-icu:9.0.0@jar
 - org.apache.solr:analysis-extras:10.0.0-SNAPSHOT@
 - org.slf4j:jcl-over-slf4j:1.7.35@jar 

Issue Links

• relates to: SOLR-15942 Upgrade Hadoop to 3.3.1
• relates to: SOLR-15989 Upgrade to Tika 1.28.1
• relates to: SOLR-15990 Use google-cloud-bom for gcs-repository dependencies
• links to: GitHub Pull Request #635