Search code examples
securityjavafxadoptopenjdk

AdoptOpenJDK suggests that openjfx (javafx) has potential safety issues, is this correct?


In the FAQ section of AdoptOpenJDK near the bottom they suggest that due to the slow patching of JavaFX, it has (potential) safety issues. Is that a correct statement or is it still OK to make java apps with javafx GUI ?

I need to start up a new (long term commercial distributed) project and I'm not sure if javaFX is the one to pick due to this rather negative comment.

I know this question could trigger opinions, but that is not my intention. I like both JavaFX and Swing and I do not need help on being reminded that these tools are both great ! I'm concerned about the safety due to this article.


Solution

  • Thanks to José Pereda and mipa !

    I have copied their answers and bundled them as the final answer to my question.

    José Pereda:

    With different words, the unpatched free JavaFX 11.0.2 version is not safe to be bundled with the OpenJDK new versions. They are asking for someone to do OpenJFX LTS for free, which won't happen. But you have a commercial LTS offering (releasing 11.0.10 in a few days and providing support), and you still have free JavaFX 15.0.1 and 16-ea+XX with all the patches as well. In any case, these offerings are not bundled with OpenJDK, but that is not an issue, you can download them from Maven Central.

    Mipa:

    You can always use and bundle the latest version of JavaFX including all patches with your application even if, for some reason I don't understand, you are still bound to Java 11. So in practice there is no problem you have to worry about.