GoogleCloudPlatform / GoogleCloudPlatform/spring-cloud-gcp

FOSSA reporting abandoware libraries

Open
#4,295 1 comment 0 reactions 0 assignees View on GitHub
priority: p3 type: question
Dominant language
Java
Stars
551
Forks
349
Avg merge
1d 13h
Merged PRs (30d)
14

Description

FOSSA is reporting as abandoware those packages that have not received any updates in over two years.
We are seeking for your help to update the corresponding packages and reduce the risk of any future vulnerabilities.

**org.apache.httpcomponents:httpclient (4.5.14)**

The last known update for this was released December 4th, 2022. This is being used by:

- Google Cloud Secret Manager (2.81.0)
- Google Cloud Firestore (3.34.0)
- Google Cloud Core (2.62.2)
- BigQuery (2.57.1)
- Google Auth Library for Java - OAuth2 HTTP (1.41.0)
- Google HTTP Client Library for Java (2.0.2)

**org.apache.httpcomponents:httpcore (4.4.16)**

The last known update for this project was released November 29th, 2022.

- Google HTTP Client Library for Java (2.0.2)
- Google Cloud Secret Manager (2.81.0)
- Google Cloud Firestore (3.34.0)
- BigQuery (2.57.1)
- Apache HttpClient (4.5.14)

**org.checkerframework:checker-compat-qual (2.5.6)**

The last known update for this project was released November 2nd, 2023.

- BigQuery (2.57.1)

**javax.annotation:javax.annotation-api (1.3.2)**

The last known update for this project was released February 21st, 2018.

- Google Cloud Storage (2.61.0)
- Google Cloud Secret Manager (2.81.0)
- Google Cloud Firestore (3.34.0)
- BigQuery (2.57.1)
- GAX (Google Api eXtensions) for Java (2.72.2)
- API Common (2.55.2)
- proto-google-cloud-secretmanager-v1beta2 (2.81.0)
- proto-google-cloud-secretmanager-v1beta1 (2.81.0)
- proto-google-cloud-secretmanager-v1 (2.81.0)

**io.opencensus:opencensus-contrib-http-util (0.31.1)**

The last known update for this project was released April 29th, 2022.

- Google Cloud Firestore (3.34.0)
- Google Cloud Core (2.62.2)
- BigQuery (2.57.1)
- Google Auth Library for Java - OAuth2 HTTP (1.41.0)
- Google HTTP Client Library for Java (2.0.2)
- Google Cloud Storage (2.61.0)
- Google Cloud Secret Manager (2.81.0)

**org.conscrypt:conscrypt-openjdk-uber (2.5.2)**

The last known update for this project was released March 30th, 2021.

- Google Cloud Storage (2.61.0)
- Google Cloud Secret Manager (2.81.0)
- Google Cloud Firestore (3.34.0)
- BigQuery (2.57.1)

**io.perfmark:perfmark-api (0.27.0)**

The last known update for this project was released December 21st, 2023.

- Google Cloud Storage (2.61.0)
- Google Cloud Secret Manager (2.81.0)
- Google Cloud Firestore (3.34.0)
- BigQuery (2.57.1)

**org.codehaus.woodstox:stax2-api (4.2.2)**

The last known update for this project was released October 10th, 2023.

- Google Cloud Storage (2.61.0)

Contributor guide

Open the contributing guide

Research direction

The issue names Java dependencies but no files or tests. Start by locating the dependency declarations for the listed coordinates, then check compatible versions and the project's verification commands; done means the stale dependencies are updated without breaking the build and FOSSA no longer flags them.

Written by the indexing model from the issue text.

Assessment

Tech stack
java
Domain
build-system, security
Issue type
Refactor
Difficulty
4/5
Estimated time
3-5 days
Activity status
Quiet
Clarity
Mostly clear
Newbie friendliness
35/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.