[
https://issues.apache.org/jira/browse/ZOOKEEPER-4835?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=18097304#comment-18097304
]
David Smiley commented on ZOOKEEPER-4835:
-----------------------------------------
crickets... meanwhile Netty has more CVEs that I've ever seen a project have.
ZK continues to link to it by a thread.
> Netty should be an optional dependency
> --------------------------------------
>
> Key: ZOOKEEPER-4835
> URL: https://issues.apache.org/jira/browse/ZOOKEEPER-4835
> Project: ZooKeeper
> Issue Type: Improvement
> Reporter: David Smiley
> Priority: Major
> Labels: pull-request-available
> Attachments: zk-netty-violations.txt
>
> Time Spent: 1h 10m
> Remaining Estimate: 0h
>
> ZK should not mandate the inclusion of Netty if Netty features aren't being
> used. There are very few usages of Netty from ZK files that are not named
> Netty, so this looks pretty easy.
--
This message was sent by Atlassian Jira
(v8.20.10#820010)
