Well, the Java World is not free from it's problems when it comes to dependencies: https://blog.autsoft.hu/a-confusing-dependency/
Personally I do not understand why Java libraries which are binary blobs are not targeted more often.
Personally I do not understand why Java libraries which are binary blobs are not targeted more often.
Java libraries are JAR -> Java Archives. You can unzip them and there is JVM bytecode inside which can be decompiled. Not really binary blobs.