activemq-core depends on dropped packages: xbean-spring <- springframework-web <- axis (unfixed security issue)