It scans the classpath and silently instantiates whatever it finds. E.g. you're depending on the mongodb client drivers? Congratulations, your spring context suddenly contains connections to mongodb servers. Upgrade one of your dependencies and the new version has a dependency on tomcat? Congratulations, your spring boot application silently starts running a webserver.