anchor.diff:  This will fail the build on any module that currently uses an internal JDK API.
   
   
  -[NOTE]
  +[WARNING]
   ====
   At the time of writing the `isis-core-schema` module fails the build.
   ====
   
  +
  
positive.code: 
  
  
  == Checking for Vulnerabilities
  
  Apache Isis configures the link:https://www.owasp.org/index.php/Main_Page[OWASP] link:https://www.owasp.org/index.php/OWASP_Dependency_Check[dependency check] link:http://jeremylong.github.io/DependencyCheck/dependency-check-maven/index.html[Maven plugin] to determine whether the framework uses libraries that are known to have security vulnerabilities.
  
negative.code: 
  
  
  [[_cgcon_building-isis_checking-for-use-of-internal-jdk-apis]]
  == Checking for use of internal JDK APIs
  
  Apache Isis configures the link:https://maven.apache.org/plugins-archives/maven-jdeps-plugin-3.0.0/[jdeps maven plugin] to check for any usage of internal JDK APIs.  This is in preparation for Java 9 module system (Jigsaw) which will prevent such usage of APIs.
  