[jira] (KAFKA-15203) Remove dependency on Reflections

["Ganesh Sadanala (Jira)" <ji...@apache.org>]

    [ https://issues.apache.org/jira/browse/KAFKA-15203 ]


    Ganesh Sadanala deleted comment on KAFKA-15203:
    -----------------------------------------

was (Author: JIRAUSER305566):
I still don't understand one point here: I observe that `Plugins.initLoader(...)` method is using both `ReflectionScanner` and `ServiceLoader` to load all plugins. 

 

The use case is to completely transition this to `ServiceLoader`. [~gharris1727] Is `ReflectionScanner` still needed here?

 

Note: We can keep it as it is inside the ConnectPluginPath for the sake of script run.

> Remove dependency on Reflections 
> ---------------------------------
>
>                 Key: KAFKA-15203
>                 URL: https://issues.apache.org/jira/browse/KAFKA-15203
>             Project: Kafka
>          Issue Type: Bug
>          Components: connect
>            Reporter: Divij Vaidya
>            Assignee: Ganesh Sadanala
>            Priority: Major
>              Labels: newbie
>             Fix For: 5.0.0
>
>
> We currently depend on reflections library which is EOL. Quoting from the GitHub site:
> _> Please note: Reflections library is currently NOT under active development or maintenance_
>  
> This poses a supply chain risk for our project where the security fixes and other major bugs in underlying dependency may not be addressed timely.
> Hence, we should plan to remove this dependency.



--
This message was sent by Atlassian Jira
(v8.20.10#820010)