9 ms·
Lombok has come up a bit in this discussion. Are there any other popular Java libraries or frameworks that are affected?
by bloat 2y ago
Lombok has come up a bit in this discussion. Are there any other popular Java libraries or frameworks that are affected?
- kaba0 2y agoNo other comes to mind. Most other libraries are proper annotation processors, meaning they abide by the rules and are only additive, generating new classes. One such would be mapstruct which is pretty frequently used.
- the-alchemist 2y agoLombok is not affected by this, as it is not an annotation processor. The most popular annotation processor that I've seen "in the wild" is the Hibernate Metamodel Generator (https://hibernate.org/orm/tooling/ https://hibernate.org/orm/tooling/). Also, Immutables (https://immutables.github.io/ https://immutables.github.io/), my favorite Lombok alternative, is affected. Of note, you can bypass this more-security-concious approach by just passing `-prof:full` to javac.
- lucumo 2y ago> Lombok is not affected by this, as it is not an annotation processor. Lombok uses an annotation processor to bootstrap itself.
- lucumo 2y agoI know of these: - Immutables - Autovalue - Mapstruct - Checker Framework There's quite a list here https://github.com/gunnarmorling/awesome-annotation-processing?tab=readme-ov-file#existing-annotation-processors https://github.com/gunnarmorling/awesome-annotation-processi... (Though I don't think Error Prone is actually an annotation processor, but rather a javac plugin.) There's some irony in that Immutables and Autovalue are often named as alternatives for people that dislike Lombok's implementation but do like (some of) Lombok's features.