Details
-
Task
-
Status: Resolved
-
Normal
-
Resolution: Fixed
-
4.0.12, 4.1.4, 5.0-alpha2, 5.0, 5.1
-
None
-
Code Clarity
-
Low Hanging Fruit
-
All
-
None
-
Description
I was digging in the project deps and if you compare all libs in "libs" dir and all libs in "build/lib/jars", there are indeed some differences which are OK however in build/lib/jars there are also libraries for byteman and byte-buddy. This is clearly wrong as these dependecies should not be accessible from the production code, only from tests.
The reason they are accessible in prod code is that there is the class TestRateLimiter (1). I do not have a clue why that class is in the prod code in the first place. The only place it is referenced in is here (2) but that byteman script is not loaded anywhere in tests. I was also checking Python dtests.
I think this is some leftover or something like "I will keep it here when I need it", but as nobody seems to do, I strongly advocate for removing it and making bytebuddy and byteman only test scoped dependencies as it should be.
A reader who pays attention notices that these dependencies are of provided scope which is a trick to have it compilable but not among the libraries in the production runtime and it does not do any harm as it is never invoked from the production code (if it was, it would fail on missing imports) neverthless this is still an issue which should be addressed. We were doing something similar with assertj dependency recently.
The second issue is that there is a dependency on compress-lzf in build dependencies. This is not necessary either as that library was removed from the repository in (3) but it still somehow leaked to the build process again.
(1) https://github.com/apache/cassandra/blob/trunk/src/java/org/apache/cassandra/utils/TestRateLimiter.java
(2) https://github.com/apache/cassandra/blob/trunk/test/resources/byteman/mutation_limiter.btm
(3) https://github.com/apache/cassandra/commit/fc92db2b9b56c143516026ba29cecdec37e286bb