top | item 40510324

(no title)

bloat | 1 year ago

Lombok has come up a bit in this discussion. Are there any other popular Java libraries or frameworks that are affected?

discuss

order

the-alchemist|1 year ago

Lombok is not affected by this, as it is not an annotation processor.

The most popular annotation processor that I've seen "in the wild" is the Hibernate Metamodel Generator (https://hibernate.org/orm/tooling/).

Also, Immutables (https://immutables.github.io/), my favorite Lombok alternative, is affected.

Of note, you can bypass this more-security-concious approach by just passing `-prof:full` to javac.

lucumo|1 year ago

> Lombok is not affected by this, as it is not an annotation processor.

Lombok uses an annotation processor to bootstrap itself.

lucumo|1 year ago

I know of these:

- Immutables - Autovalue - Mapstruct - Checker Framework

There's quite a list here https://github.com/gunnarmorling/awesome-annotation-processi... (Though I don't think Error Prone is actually an annotation processor, but rather a javac plugin.)

There's some irony in that Immutables and Autovalue are often named as alternatives for people that dislike Lombok's implementation but do like (some of) Lombok's features.

kaba0|1 year ago

No other comes to mind. Most other libraries are proper annotation processors, meaning they abide by the rules and are only additive, generating new classes. One such would be mapstruct which is pretty frequently used.