search

interledger / interledger-rs

An easy-to-use, high-performance Interledger implementation written in Rust
http://interledger.rs
Other
201 stars 70 forks source link

Maintenance Status #745

Open pinkforest opened 2 years ago

pinkforest commented 2 years ago

Hello @koivunej @KristianWahlroos @matdehaast @emschwartz @frnsskk

Just wondering what the maintenance status of this project would be ?

I have open issue here to detail analysis which came after our discussion around unicase: https://github.com/rustsec/advisory-db/issues/1303

There is also concern around username comparison here to update unicase dependency: https://github.com/interledger-rs/interledger-rs/pull/744

Unicase dependency problem - recommend bumping to 2.6.0: https://github.com/rustsec/advisory-db/pull/1176

Would you like us to flag informational around that this crate is deprecated by unmaintained status and it may be also feasible to yank the old version of interledger-service that uses the old version of unicase ?

This informational would gentle advice any downstream to be vary of using it - since I am not sure whether these published crates are supposed / intended to be used - but the decision would be yours as we generally don't file unmaintained advisories where the maintainer is reachable and either does not agree as to unmaintained status - we may file advisories where the project has been officially deprecated or confirmed by the maintainer(s) where it is feasible to advice any downstream users along as to the status.

Thanks for the assistance !

koivunej commented 2 years ago

Sorry for taking so long with this @pinkforest but as for me and rest of @eqlabs we are not actively maintaining this repository. I think it would be good to mark this unmaintained for now. I will however make the version bumps noted.