William Price

This is one of those cases where there is a [platform-specific implementation](https://github.com/openjdk/jdk8u/blob/master/jdk/src/windows/classes/java/lang/ProcessImpl.java#L190) that's simply not going to exist on a Linux environment. That's one of the risks you take when...

As you say, something is putting dependencies on the JMH runtime classpath _in addition to_ those items contained in the fat JAR: ``` SLF4J: Class path contains multiple SLF4J bindings....

The linked DependencyCheck project is doing a poor job matching CPEs and has attributed the CVE for this issue to an unrelated Java library. That's the FP that @rposkocil is...

@StayPirate I'm not a Nim user; with that caveat, yes I agree with you.