Skip to content

Huge performance degradation after upgrade dependency-check-maven from 6.3.1 to 6.4.x / 6.5.x #3923

@sammyhk

Description

@sammyhk

Describe the bug
There is a hug performance degradation after upgrade dependency-check-maven from 6.3.1 to 6.4.x / 6.5.x.
Before the upgrade (v6.3.1) it just take ~7 minutes for running org.owasp:dependency-check-maven:aggregate but it bump to ~1.5 hour for running the same command in v6.4.x / v6.5.x.
Note that due to issue #3679, v6.3.2 got NPE in my project so cannot have the statistic data.

Detail of the execution time:
v6.3.1: 07:06 minutes
v6.3.2: 02:04 minutes and then NPE exception
v6.4.0: 01:21 hours
v6.4.1: 01:19 hours
v6.5.0: 01:16 hours
v6.5.1: 01:17 hours

Version of dependency-check used
The problem occurs using version 6.4.0 / 6.4.1 / 6.5.0 / 6.5.1 of the maven plugin

Log file
Log will be provided when needed.

To Reproduce
Steps to reproduce the behavior:

  1. execute org.owasp:dependency-check-maven:6.3.1:aggregate on a multi-module project, notice the execution time
  2. execute org.owasp:dependency-check-maven:6.4.0:aggregate on the same multi-module project, notice the execution time

Expected behavior
Should not talking some much time to execute.

Additional context
N/A

Metadata

Metadata

Assignees

No one assigned

    Labels

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions