René's URL Explorer Experiment

{"@context":"https://schema.org","@type":"DiscussionForumPosting","headline":"Dependency to threetenbp should be obsolete?","articleBody":"**Is your feature request related to a problem? Please describe.**\ngoogle-cloud-pubsub depends on threetenbp but:\n1. ThreeTenBP (ThreeTen Backport) is a backport of the Java 8 java.time API (JSR-310) to Java 6 and 7.\n2. google-cloud-pubsub requires Java 8 or higher\n\n**Describe the solution you'd like**\nRemove dependency to threetenbp (bloats SBOM and CVE findings in threetenbp).\n\n**Describe alternatives you've considered**\nWorkaround may be explicit exclusion when declaring the dependency.\n\n**Additional context**\nsee https://github.com/googleapis/java-pubsub/blob/017eb0f78423fde3edd42a07677df49512085633/google-cloud-pubsub/pom.xml#L73\n\nthreetenbp reported to have:\nhttps://nvd.nist.gov/vuln/detail/cve-2024-23081\nhttps://nvd.nist.gov/vuln/detail/CVE-2024-23082\n\n","author":{"url":"https://github.com/in-fke","@type":"Person","name":"in-fke"},"datePublished":"2025-05-08T16:02:03.000Z","interactionStatistic":{"@type":"InteractionCounter","interactionType":"https://schema.org/CommentAction","userInteractionCount":2},"url":"https://github.com/2424/java-pubsub/issues/2424"}