mbien commented on PR #8755: URL: https://github.com/apache/netbeans/pull/8755#issuecomment-3263191393
> * Keep the module for backward compatibility reasons > * at least that's what I'd do to follow the original NetBeans Platform compatibility visions. > * it just lies around causing no harm > * 3rd party applications can get it from Maven central older versions up to NB 27 of this module are on maven central and the deprecation happened 19y ago with the commit msg: _"Marking module deprecated to remind people not to use it."_. Stopping to release it is just the next step to remind people to not use it. > * there is (almost) no cost associated to the module being around I disagree. Dead code has cumulative maintenance costs associated with it. Security team has to respond to exploit notifications and javac, code scanners and vulnerability scanners produce extra noise which is in the way every time a real issue is investigated. And as mentioned, the module uses JDK API which is deprecated for removal. We shouldn't wait for things to break before we have to react in a hurry, we pushed our luck with the security manager removal once, we don't have to do this every time. -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected] --------------------------------------------------------------------- To unsubscribe, e-mail: [email protected] For additional commands, e-mail: [email protected] For further information about the NetBeans mailing lists, visit: https://cwiki.apache.org/confluence/display/NETBEANS/Mailing+lists
