[jira] [Commented] (PHOENIX-6064) Make Tephra support optional

["ASF GitHub Bot (Jira)" <ji...@apache.org>]

    [ https://issues.apache.org/jira/browse/PHOENIX-6064?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17483144#comment-17483144 ] 

ASF GitHub Bot commented on PHOENIX-6064:
-----------------------------------------

stoty opened a new pull request #1375:
URL: https://github.com/apache/phoenix/pull/1375


   build with -Dwithout.tephra to omit Tephra from the artifacts


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: issues-unsubscribe@phoenix.apache.org

For queries about this service, please contact Infrastructure at:
users@infra.apache.org


> Make Tephra support optional
> ----------------------------
>
>                 Key: PHOENIX-6064
>                 URL: https://issues.apache.org/jira/browse/PHOENIX-6064
>             Project: Phoenix
>          Issue Type: Improvement
>          Components: core, tephra
>    Affects Versions: 5.1.0
>            Reporter: Istvan Toth
>            Assignee: Istvan Toth
>            Priority: Major
>             Fix For: 5.1.0
>
>         Attachments: PHOENIX-6064.master.v1.patch
>
>          Time Spent: 20m
>  Remaining Estimate: 0h
>
> Tephra has and old Guava dependency, that cannot be removed due to Twill depending on it. Removing the Twill dependency from Tephra is possible, but not trivial. 
> This Guava has CVEs, which will show up in static analysis tools, which will cause some potential users not to adopt Phoenix.
> Provide an option to build Phoenix without Tephra, and its problematic dependencies.



--
This message was sent by Atlassian Jira
(v8.20.1#820001)