playframework - Play Framework core dependency management/exclusion -

we using play 2.1.1 (scala) , in efforts tie down our dependencies, have found there several older deps being loaded in directly play framework.

specifically, oauth.signpost brings in http-components 4.0 ( , in turn commons-codec 1.3 ) whereas have other dependencies on http-componts 4.1 , commons-codec 1.6

the documentation seems pretty sparse in area - @ least in older play 1.2.x dependencies.yml more explicit, cant find references current 2.1.x release.

i'd hate have futz framework's build.scala in ${play2_home}/framework/project remove dependency ( never need oauth.signpost in particular app ), far seems way.

any pointers?

(edit: came across this: play framework 2.1 remove core dependency related specific transitive dependency, i'd prefer able remove whole explicit dependency core framework )

i don't know how exclude core dependency, may try exclude transitive dependencies in build.scala file:

val appdependencies = seq(      ...      ("oauth.signpost" % "signpost-commonshttp4" % "1.2.1.2") .exclude("org.apache.httpcomponents", "httpclient")     ) 

or use intransitive() method:

val appdependencies = seq(      ...      ("oauth.signpost" % "signpost-commonshttp4" % "1.2.1.2") .intransitive()     ) 

it not perfect solution, may you.