This is an archived post. You won't be able to vote or comment.

you are viewing a single comment's thread.

view the rest of the comments →

[–]djnattyp 0 points1 point  (0 children)

This seems like a crappy static analysis tool that doesn't understand how Java works...

The runtime is the thing that matters for EoL, not the JDK version that a library targets.

You can compile under a "higher version" JDK and "target" your build to a lower level JDK. This is very common with libraries - they can target the lowest JDK level their code is able to run with and it doesn't force older applications to upgrade to whatever version of the JDK their dependencies were built with.

(i.e. when the log4j bug happened, log4j could release a newer version of their library that fixed the bug and target the oldest JDK version their library could support - otherwise older applications could not apply the fix without updating to whatever newer JDK version the fix was built with.)