#326: commons-beanutils:1.9.4 -> commons-beanutils2:2.0.0

[SoltauFintel]

see #326

[SoltauFintel]

It has to be mentioned that beanutils2 2.0.0 was not released by Apache. However, it looks like https://github.com/melloware/commons-beanutils2 has released it on MavenCentral.

[leonate]

Good job!
Are there any breaking changes between commons-beanutils and commons-beanutils2 that can impact us?

[SoltauFintel]

@leonate : I don't know. Probably not. I can't say for sure.

[uek06]

Hi !
commons-beanutils is no longer maintained, and commons-beanutils2 seems like a dark fork where we have no guarantee that it will be udpated in the future.
Instead of relying on this kind of dependency, which can lead to future CVEs for instance, I think that we could delete this dependency and use full native Java reflection.
What do you think ?

[SoltauFintel]

@uek06

I've had a quick look at it. I haven't found a commons-beanutils alternative. I don't have time for further research.

If you want to you can make a counterproposal as a new pull request. Object property access should be just as fast. The solution should allow DynaBean support to be added.