github.com/tarm/serial dependency dormant since 2018

[major]

I maintain the Fedora package for guest-agent in Fedora and it still has a dependency on github.com/tarm/serial. However, that repository hasn't seen updates since 2018.

Would it be possible to use a newer, more recently updated dependency in the project instead? Thanks!

[dorileo]

Hi @major

Is it an issue with fedora packaging policies? For alternate lib this one seems to be more active though: https://pkg.go.dev/go.bug.st/serial#section-readme

[major]

@dorileo Well, it can be challenging to package something that is no longer maintained, especially if a vulnerability is found or a bug pops up. It looks like that one has a slightly different API.