> Don't even get me started on the recent security debacle. I'm kinda curious to get you started on the security debacle, actually. Do you ship Java software

> Don't even get me started on the recent security debacle. I'm kinda curious to get you started on the security debacle, actually. Do you ship Java software that runs client-side? Spring is usually for server-side; if you're just on the server side, though, how has the security debacle affected you? I generally agree about the ecosystem (yup, just gotta avoid most of it) and the core language (though the clunkyness is somewhat mitigated by IDE facilities for auto-generating code). But I mostly spend my time on either client-side JavaScript or server-side Java, and it's the JavaScript side that drives me crazy -- in the JVM, things just work. I've hit runtime bugs maybe twice in 14 years working with Java on the server side, and one of those was on the AS/400 (!), and unless I'm doing something stupid, it's fast.