Could io.github.scouter-project:scouter-webapp:2.17.1 drop off redundant dependencies?

[slimming-fat]

Hi, I found that io.github.scouter-project:scouter-webapp:2.17.1’s pom file introduced 100 dependencies. However, among them, 6 libraries (6% have not been used by your project), the redundant dependencies are listed below.

6 redundant libraries have not been maintained by developers for more than 3 years（outdated dependencies）.

Reduce these unused dependencies can help prevent introducing bugs/vulnerabilities from outdated dependencies. Meanwhile, it can minimize the project size. To safely remove redundant dependencies, I constructed a complete call graph (resolved most of Java reflection and dynamic binding) , and validated that they have not been used by the client code.

This PR io.github.scouter-project:scouter-webapp:2.17.1 for removing the redundant dependencies have passed the tests.

Best regards

Redundant dependencies

Redundant direct dependencies:

  javax.activation:activation:1.1.1:compile [67 KB]

Redundant indirect dependencies:

     org.ow2.asm:asm-tree:5.1:compile [28 KB]
     org.jboss.logging:jboss-logging:3.1.3.GA:compile [55 KB]
     com.fasterxml:classmate:1.0.0:compile [58 KB]
     org.ow2.asm:asm-commons:5.1:compile [46 KB]
     org.ow2.asm:asm:5.1:compile [52 KB]  

Outdated dependencies

org.jboss.logging:jboss-logging:3.1.3.GA ( 3653 days without maintenance) com.fasterxml:classmate:1.0.0 ( 3429 days without maintenance) org.ow2.asm:asm:5.1 ( 2558 days without maintenance) javax.activation:activation:1.1.1 ( 4882 days without maintenance) org.ow2.asm:asm-tree:5.1 ( 2558 days without maintenance) org.ow2.asm:asm-commons:5.1 ( 2558 days without maintenance)