https://vulert.com/blog/streamlining-java-dependency-management/