Shaded Jackson

We are implementing a neural network for one of our products using the deep learning libraries  for java. One of the dependencies for deeplearning4j-nn.jar is shaded Jackson by nd4j. This is blowing up in the OWASP security scan of the libraries. Therefore, we cannot use this dependency. Is there an alternate option around the shaded jar?



Below are  all the jars we are using for this project. This is the smallest list of dependencies we could find to get the model running.  I would like to know if we can reduce this further down and/or reduce the size of some of the big ones.? Please guide me.





#### Version Information

deeplearning4j-nn-1.0.0-beta5.jar;

guava-1.0.0-beta5.jar;

jackson-1.0.0-beta5.jar;

javacpp-1.5.1-1.jar;

mkl-dnn-0.20-1.5.1-linux-x86_64.jar;

mkl-dnn-0.20-1.5.1-windows-x86_64.jar;

nd4j-api-1.0.0-beta5.jar;

nd4j-buffer-1.0.0-beta5.jar;

nd4j-common-1.0.0-beta5.jar;

nd4j-context-1.0.0-beta5.jar;

nd4j-native-1.0.0-beta5.jar;

nd4j-native-1.0.0-beta5-linux-x86_64.jar;

nd4j-native-1.0.0-beta5-windows-x86_64.jar;

nd4j-native-api-1.0.0-beta5.jar;

nd4j-native-platform-1.0.0-beta5.jar;

openblas-0.3.6-1.5.1.jar;

openblas-0.3.6-1.5.1-linux-x86_64.jar;

openblas-0.3.6-1.5.1-windows-x86_64.jar;

[]