After bzip2's domain expired, it was registered by a different person, so there is no trustworthy upstream source. (I am intentionally not linking to the domain.)
My distro is unaffected (I have always used a tarball that I acquired ages ago), but this is a good reminder that I should simply remove bzip2. I switched to 7-Zip many years ago (for .bz2 decompression; I don't compress .bz2 anymore) and no longer use libbzip2 in my own programs. The distro's libbzip2 dependencies are limited to Boost.Iostreams and FreeType, AFAIK, and that support can easily be removed.
I would use zstd in my own programs now. It seems reasonable to start building it now.
After bzip2's domain expired, it was registered by a different person, so there is no trustworthy upstream source. (I am intentionally not linking to the domain.)
My distro is unaffected (I have always used a tarball that I acquired ages ago), but this is a good reminder that I should simply remove bzip2. I switched to 7-Zip many years ago (for .bz2 decompression; I don't compress .bz2 anymore) and no longer use libbzip2 in my own programs. The distro's libbzip2 dependencies are limited to Boost.Iostreams and FreeType, AFAIK, and that support can easily be removed.
I would use zstd in my own programs now. It seems reasonable to start building it now.