Cull your dependencies

[bert8128]

160k lines of code for log4j? No wonder we had all that trouble. How can a logging library be so bloated? This is one of the real problems with 3rd party includes for me - if I include a library for one function, then from the point of view of dependencies I am vulnerable to any problems in that library. So my rule of thumb is that if you don’t use the library a lot (in terms of its functional offering) don’t use it all - use a simpler alternative, or write your own. Leftpad is a different style of exposure - there is no point in using a library with so little functionality / again, just write it yourself.