search

bower / bower

A package manager for the web
bower.io
MIT License
14.99k stars 1.85k forks source link

Is the project still maintained? #2587

Closed THETCR closed 3 years ago

THETCR commented 3 years ago

Even though the README mentions that the project is still being maintained, is it actually still maintained?

It has been almost two years since the last release and half a year since the last commit. (most commits are dependency updates and documentation).

sheerun commented 3 years ago

Are there some issues you have?

THETCR commented 3 years ago

We are currently slowly migrating and the argument was presented that the migration process doesn't have to be done in a hurry, since bower is still maintained as stated by the documentation.

But all things considered it was best to ask if this is actually still the case?

sheerun commented 3 years ago

We are keeping servers online and fixing critical bugs, nothing more. It's best for you to migrate, even if bower is maintained, because it doesn't have lockfile like npm or yarn, which means your application at some point won't install

THETCR commented 3 years ago

Fair enough. Only the pace of the migration is a discussion point right now. Does this mean there won't be a release with updated dependencies like minimist and handlebars?

sheerun commented 3 years ago

I've reviewed them and they don't affect security or functionality of Bower. Updates usually mean breaking something, and I don't want to make unnecessary ones. For example new handlebars or minimist could break compatiblity with Node 0.10 which Bower is still compatible with