Describe the bug
There is a hug performance degradation after upgrade dependency-check-maven from 6.3.1 to 6.4.x / 6.5.x.
Before the upgrade (v6.3.1) it just take ~7 minutes for running org.owasp:dependency-check-maven:aggregate but it bump to ~1.5 hour for running the same command in v6.4.x / v6.5.x.
Note that due to issue #3679, v6.3.2 got NPE in my project so cannot have the statistic data.
Detail of the execution time:
v6.3.1: 07:06 minutes
v6.3.2: 02:04 minutes and then NPE exception
v6.4.0: 01:21 hours
v6.4.1: 01:19 hours
v6.5.0: 01:16 hours
v6.5.1: 01:17 hours
Version of dependency-check used
The problem occurs using version 6.4.0 / 6.4.1 / 6.5.0 / 6.5.1 of the maven plugin
Log file
Log will be provided when needed.
To Reproduce
Steps to reproduce the behavior:
- execute
org.owasp:dependency-check-maven:6.3.1:aggregate on a multi-module project, notice the execution time
- execute
org.owasp:dependency-check-maven:6.4.0:aggregate on the same multi-module project, notice the execution time
Expected behavior
Should not talking some much time to execute.
Additional context
N/A
Describe the bug
There is a hug performance degradation after upgrade dependency-check-maven from 6.3.1 to 6.4.x / 6.5.x.
Before the upgrade (v6.3.1) it just take ~7 minutes for running
org.owasp:dependency-check-maven:aggregatebut it bump to ~1.5 hour for running the same command in v6.4.x / v6.5.x.Note that due to issue #3679, v6.3.2 got NPE in my project so cannot have the statistic data.
Detail of the execution time:
v6.3.1: 07:06 minutes
v6.3.2: 02:04 minutes and then NPE exception
v6.4.0: 01:21 hours
v6.4.1: 01:19 hours
v6.5.0: 01:16 hours
v6.5.1: 01:17 hours
Version of dependency-check used
The problem occurs using version 6.4.0 / 6.4.1 / 6.5.0 / 6.5.1 of the maven plugin
Log file
Log will be provided when needed.
To Reproduce
Steps to reproduce the behavior:
org.owasp:dependency-check-maven:6.3.1:aggregateon a multi-module project, notice the execution timeorg.owasp:dependency-check-maven:6.4.0:aggregateon the same multi-module project, notice the execution timeExpected behavior
Should not talking some much time to execute.
Additional context
N/A