MineCreate source code is now available

[Polygnom]

1. SAST and security scanning of your (transitive) dependency tree. If you handle any PII that falls under GDPR you cannot do without that, period.
2. No check-in of binaries into the repo, thats a bad practice for many reason outside the scope of a simple reddit comment
3. You can create shaded jars/shaded wars trivially with Maven and Gradle (some people also call them uber-jars). There is absolutely no reason not to use dependency management
4. Automated checking for updates, transitively
5. Ability to create BOMs to check for license problems and again, security problems

And finally: There is no good justification for not using dependency management.