[leipert]

Well, the Java World is not free from it's problems when it comes to dependencies: https://blog.autsoft.hu/a-confusing-dependency/

Personally I do not understand why Java libraries which are binary blobs are not targeted more often.

[purple_ducks]

> Java libraries which are binary blobs

Java libraries are JAR -> Java Archives. You can unzip them and there is JVM bytecode inside which can be decompiled. Not really binary blobs.