[ https://issues.apache.org/jira/browse/MDEP-964?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]
Elliotte Rusty Harold reassigned MDEP-964: ------------------------------------------ Assignee: Elliotte Rusty Harold > Allowlist org.glassfish:javax.json > ---------------------------------- > > Key: MDEP-964 > URL: https://issues.apache.org/jira/browse/MDEP-964 > Project: Maven Dependency Plugin > Issue Type: Improvement > Reporter: Elliotte Rusty Harold > Assignee: Elliotte Rusty Harold > Priority: Minor > > found this one in our own code: > - <dependency> > - <groupId>org.glassfish</groupId> > - <artifactId>javax.json</artifactId> > - <version>1.1.4</version> > - <scope>test</scope> > - </dependency> > It's typically loaded by reflection so not found by the analyzer. Might want > to list it as used iff javax.json-api is used -- This message was sent by Atlassian Jira (v8.20.10#820010)