It's even in the spring-cloud-gateway-mvc jar file with a boot package name. I don't know how it ever compiles. I guess it is technically legal, but bad.