Maven dependency analyzer automatic cleanup

[simoneromani-90]

Hello,
I am currently busy keeping up with LCM and upgrade our dependencies. One solution that was proposed to me was using Dependabot, but I also realized that I have way too many dependencies in my pom.xml (I use Maven) and I am probably not using them a good 15% of them. Upgrading dependencies that I don't really use will only waste my time in code review.

I looked around the internet for automated processes that remove unused dependencies, add undeclared dependencies and move non-test scoped to the test-scoped, but I couldn't find anything. So I thought of OpenRewrite!

I am using OpenRewrite for other LCM tasks, like migrating to JUnit5 or Assertj, and there is a lot of Maven recipes already available, but I feel like there is a lot of potential to automate the process of mvn dependency:analyze via an OpenRewrite recipe.

Do you also see the potential? Would it actually be feasible to create a recipe like that?