What changed, and why it matters
This commit simply removes a third-party Java library called 'streamsupport' from the project. It was used to provide modern Java stream features on older Java versions, but the project no longer needs it. There is no security issue visible in this change.
No security action required. Reviewers may verify that the project still builds and runs correctly without streamsupport, and that no other files still import java8.util.* classes.
Security signals we found
No strong security signals were identified.
Evidence from the diff
The commit removes the net.sourceforge.streamsupport:streamsupport:1.7.0 dependency from build.gradle, deletes its extraJavaModuleInfo module configuration, removes the requires declaration from module-info.java, and replaces a single import of java8.util.Optional in PayNymService.java with the standard java.util.Optional (the standard import was already present). This is a routine dependency cleanup with no functional code changes.
Changed components
build.gradle dependency listsrc/main/java/module-info.javasrc/main/java/com/sparrowwallet/sparrow/paynym/PayNymService.javaInspect captured patch +0 / −9
diff --git a/build.gradle b/build.gradle
index 459646e..c4314f4 100644
--- a/build.gradle
+++ b/build.gradle
@@ -103,7 +103,6 @@ dependencies {
implementation('io.reactivex.rxjava2:rxjavafx:2.2.2')
implementation('org.apache.commons:commons-lang3:3.20.0')
implementation('org.apache.commons:commons-compress:1.28.0')
- implementation('net.sourceforge.streamsupport:streamsupport:1.7.0')
implementation('com.github.librepdf:openpdf:1.3.43')
implementation('com.googlecode.lanterna:lanterna:3.1.3')
implementation('net.coobird:thumbnailator:0.4.18')
@@ -462,12 +461,6 @@ extraJavaModuleInfo {
exports('co.nstant.in.cbor.model')
exports('co.nstant.in.cbor.builder')
}
- module('net.sourceforge.streamsupport:streamsupport', 'net.sourceforge.streamsupport') {
- requires('jdk.unsupported')
- exports('java8.util')
- exports('java8.util.function')
- exports('java8.util.stream')
- }
module('net.coobird:thumbnailator', 'net.coobird.thumbnailator') {
exports('net.coobird.thumbnailator')
requires('java.desktop')
diff --git a/src/main/java/com/sparrowwallet/sparrow/paynym/PayNymService.java b/src/main/java/com/sparrowwallet/sparrow/paynym/PayNymService.java
index ddd69b1..4a7040b 100644
--- a/src/main/java/com/sparrowwallet/sparrow/paynym/PayNymService.java
+++ b/src/main/java/com/sparrowwallet/sparrow/paynym/PayNymService.java
@@ -11,7 +11,6 @@ import com.sparrowwallet.sparrow.AppServices;
import io.reactivex.Observable;
import io.reactivex.rxjavafx.schedulers.JavaFxScheduler;
import io.reactivex.schedulers.Schedulers;
-import java8.util.Optional;
import org.slf4j.Logger;
import org.slf4j.LoggerFactory;
diff --git a/src/main/java/module-info.java b/src/main/java/module-info.java
index 28ad25b..0c92d2e 100644
--- a/src/main/java/module-info.java
+++ b/src/main/java/module-info.java
@@ -44,7 +44,6 @@ open module com.sparrowwallet.sparrow {
requires io.reactivex.rxjava2fx;
requires org.apache.commons.lang3;
requires org.apache.commons.compress;
- requires net.sourceforge.streamsupport;
requires co.nstant.in.cbor;
requires com.github.librepdf.openpdf;
requires com.googlecode.lanterna;
Why this scored 15/100
Community notes
Notes can correct, qualify, or add evidence to the AI analysis. Every note shown here has been validated by a human moderator.
The AI analysis stands alone for now. Submit a note if you can add evidence or important context.