reschke commented on code in PR #2782:
URL: https://github.com/apache/jackrabbit-oak/pull/2782#discussion_r2884939241
##########
DEPENDENCY_ANALYSIS_REPORT.md:
##########
@@ -0,0 +1,340 @@
+# Redundant Dependencies Analysis Report
+
+Generated: 2026-03-04
+
+## Executive Summary
+
+Total modules analyzed: 46
+Unique dependencies: 272
+
+## 1. Dependencies with Multiple Versions
+
+These dependencies are declared with different versions across modules,
+which can lead to classpath conflicts and unpredictable behavior.
+
+### com.google.guava:guava
+Versions found: ${shaded.guava.version}, 33.1.0-jre
+
+Locations:
+- oak-segment-azure: 33.1.0-jre
+- oak-shaded-guava: ${shaded.guava.version}
+
+### com.googlecode.json-simple:json-simple
+Versions found: 1.1, 1.1.1
+
+Locations:
+- oak-core: 1.1.1
+- oak-webapp: 1.1
+- oak-it: 1.1.1
+- oak-jcr: 1.1.1
+- oak-pojosr: 1.1.1
+- oak-run: 1.1.1
+- oak-store-document: 1.1.1
+
+### commons-logging:commons-logging
+Versions found: 1.2, 1.3.4
+
+Locations:
+- oak-it-osgi: 1.2
+- oak-run: 1.3.4
+
+### org.apache.felix:org.apache.felix.configadmin
+Versions found: 1.8.16, 1.8.8
+
+Locations:
+- oak-pojosr: 1.8.16
+- oak-run-commons: 1.8.8
+- oak-run: 1.8.8
+
+### org.apache.lucene:lucene-core
+Versions found: ${lucene.version}, 3.6.0
+
+Locations:
+- oak-standalone: ${lucene.version}
+- oak-pojosr: ${lucene.version}
+- oak-upgrade: 3.6.0
+
+### org.hamcrest:hamcrest-core
+Versions found: 1.3, 2.2
+
+Locations:
+- oak-blob-plugins: 1.3
+- oak-search-elastic: 2.2
+
+## 2. Frequently Declared Dependencies
+
+These dependencies are declared in many modules. Consider adding them to
+dependencyManagement in oak-parent to centralize version control.
+
+### org.apache.jackrabbit:oak-commons
+Used in 38 modules
+
+Modules: oak-auth-external, oak-auth-ldap, oak-benchmarks, oak-blob, oak-blob
+... and 33 more
+
+### org.apache.jackrabbit:oak-core
+Used in 36 modules
+
+Modules: oak-auth-external, oak-auth-external, oak-auth-ldap, oak-auth-ldap,
oak-authorization-cug
+... and 31 more
+
+### org.apache.jackrabbit:oak-store-spi
+Used in 28 modules
+
+Modules: oak-auth-external, oak-authorization-cug,
oak-authorization-principalbased, oak-benchmarks, oak-blob-cloud
+... and 23 more
+
+### org.apache.jackrabbit:oak-api
+Used in 23 modules
+
+Modules: oak-auth-external, oak-auth-ldap, oak-authorization-cug,
oak-authorization-principalbased, oak-benchmarks
+... and 18 more
+
+### org.apache.jackrabbit:oak-jcr
+Used in 20 modules
+
+Modules: oak-auth-external, oak-authorization-cug, oak-authorization-cug,
oak-authorization-principalbased, oak-exercise
+... and 15 more
+
+### org.apache.jackrabbit:oak-segment-tar
+Used in 19 modules
+
+Modules: oak-exercise, oak-it, oak-it, oak-it-osgi, oak-jcr
+... and 14 more
+
+### org.apache.jackrabbit:oak-store-document
+Used in 18 modules
+
+Modules: oak-exercise, oak-it, oak-it, oak-it-osgi, oak-jcr
+... and 13 more
+
+### org.apache.jackrabbit:oak-core-spi
+Used in 17 modules
+
+Modules: oak-benchmarks, oak-blob-cloud, oak-blob-plugins, oak-core, oak-core
+... and 12 more
+
+### org.apache.jackrabbit:jackrabbit-jcr-commons
Review Comment:
These entries are irrelevant, because we always use the project version. It
does not need to be declared anywhere else.
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: [email protected]
For queries about this service, please contact Infrastructure at:
[email protected]
