It is not a real dependency, so should not be any issue. I am not sure why your tool flags it at all.
On Thu, Apr 28, 2022 at 10:04 PM Sundar Sabapathi Meenakshi < sun...@mcruncher.com> wrote: > Hi all, > > I am using spark-sql_2.12 dependency version 3.2.1 in my > project. My dependency tracker highlights the transitive dependency > "unused" from spark-sql_2.12 as vulnerable. I check there is no update > for these artifacts since 2014. Is the artifact used anywhere in spark ? > > To resolve this vulnerability, can I exclude this "unused" artifact from > spark-sql_2.12 ? Will it cause any issues in my project ? > > > --------------------------------------------------------------------- > To unsubscribe e-mail: user-unsubscr...@spark.apache.org
