https://foojay.io/today/best-practices-for-managing-java-dependencies/