[vips7L]

I haven’t really run into any libraries wanting reflective access at all. All of our applications are on Java 21, except for one that relies on 8 because it uses jdk internals.

What ones have you ran into? Jackson doesn’t even require you to —add-opens on anything.

[deepsun]

Spring, Guice? They need to instantiate classes, and call factory methods.

[vips7L]

Yes and they do that by calling the public constructors, which is permitted by the module system because they are public. There is no cracking into private methods there.