cossacklabs / themis

Easy to use cryptographic framework for data protection: secure messaging with forward secrecy and secure data storage. Has unified APIs across 14 platforms.
https://www.cossacklabs.com/themis
Apache License 2.0
1.85k stars 143 forks source link

PHP 7.2 EOL #717

Open necrogami opened 3 years ago

necrogami commented 3 years ago

Themis's most current version of the PHP Library is only available for 7.2. However as of November 30, 2020 7.2 Will go into a state that it will no longer receive any security updates.

What is the status of 7.3+?

Were on the verge of 8.0 being released as of November 26th

ilammy commented 3 years ago

Hi! Thanks for your interest in Themis! :heart:

Unfortunately, PHPThemis has not been a priority for us for quite some time. The development has been frozen for the most part, and it's not on our current roadmap either. Even the feature coverage is not complete, let alone platform support.

We are long aware of the issues with recent 7.3+ versions. It would be nice to add support of newer PHP platforms, get the API up to date with other languages, migrate to PHP FFI instead of plugins, etc. But we just don't have enough resources available for that :cry: That's definitely an area where Themis could use some help and love.

Is there a project where you're currently using Themis (or plan to use it)? What kind of application is that? Do you have a specific version of PHP to support?

vixentael commented 3 years ago

Hi @necrogami! Thank you for being concerned!

As @ilammy mentioned, right now we don't have exact plans/dates to add PHP7.3 support. Honestly saying, we don't have enough details about adoption of PHPThemis. We don't know about projects that uses PHPThemis (I'm not saying that there are none, I'm saying, that PHP community was pretty quiet for a long time).

That's why we were de-prioritizing PHPThemis. You'd help a lot if you share more tech details about your project (PHP framework?) and your plans.

vixentael commented 3 years ago

Well, PHP 8 is official now: https://www.php.net/releases/8.0/en.php

necrogami commented 1 year ago

PHP 7 is completely dead now. Are there any plans to update to 8.1+ or is php for themis completely dead?

vixentael commented 1 year ago

Current we don't see enough user base for PHPThemis to invest into updates. Feel free to contribute :) No, but really, we don't see products that would use PHPThemis. Nodejs, python, rust and go are the most popular backends for Themis.

The question is the same as it was three years ago — please share technical details about what are you building with PHPThemis, and if you would like to refresh the wrapper?

We have tons of interoperability tests to ensure that PHPThemis will be compatible with other wrappers, if refreshed.