I'm also a bit surprised to see that there's still a dependency on

org.apache.tomcat

- am I missing something? Thanks.