Sanne Grinovero ( https://hibernate.atlassian.net/secure/ViewProfile.jspa?accountId=557058%... ) *created* an issue Hibernate ORM ( https://hibernate.atlassian.net/browse/HHH?atlOrigin=eyJpIjoiZDk0YzAzYzE2... ) / Improvement ( https://hibernate.atlassian.net/browse/HHH-15600?atlOrigin=eyJpIjoiZDk0Yz... ) HHH-15600 ( https://hibernate.atlassian.net/browse/HHH-15600?atlOrigin=eyJpIjoiZDk0Yz... ) Consider distributing the ByteBuddy based enhancer as a separate module ( https://hibernate.atlassian.net/browse/HHH-15600?atlOrigin=eyJpIjoiZDk0Yz... ) Issue Type: Improvement Assignee: Unassigned Created: 12/Oct/2022 08:08 AM Priority: Major Reporter: Sanne Grinovero ( https://hibernate.atlassian.net/secure/ViewProfile.jspa?accountId=557058%... ) Having the ByteBuddy enhancers integrated in hibernate-core has been handy, but there are several situations in which it would be better off as a separate artifact: * When building GraalVM native images, this code should not be reachable as bytecode manilupation isn’t possible within the closed world set - this is currently a challenge to maintain and it would be simpler if it was contained in its separate compilation unit. * When people use the build-time enhancer, they won’t actually need all this code and its dependencies to be included in the runtime that they ship to production. This is beneficial both in terms of size (not including our enhancer code nor ByteBuddy itself) and security, as a system with less dependencies is intrinsecarlly safer. * It’s also good to limit dependencies, as it makes alignment challenges simpler; e.g. ByteBuddy is very popular and used in other libraries as well - it’s simpler to manage if we only need it within the scope of the enhancement tasks, which could be limited to build time. ( https://hibernate.atlassian.net/browse/HHH-15600#add-comment?atlOrigin=ey... ) Add Comment ( https://hibernate.atlassian.net/browse/HHH-15600#add-comment?atlOrigin=ey... ) Get Jira notifications on your phone! Download the Jira Cloud app for Android ( https://play.google.com/store/apps/details?id=com.atlassian.android.jira.... ) or iOS ( https://itunes.apple.com/app/apple-store/id1006972087?pt=696495&ct=Em... ) This message was sent by Atlassian Jira (v1001.0.0-SNAPSHOT#100208- sha1:399748d )