paragonie / random_compat

PHP 5.x support for random_bytes() and random_int()
https://paragonie.com/projects
MIT License
8.17k stars 145 forks source link

PHP 5.6 EOL #159

Open Jamesking56 opened 5 years ago

Jamesking56 commented 5 years ago

Hello,

Since PHP 5.* is now EOL across the board, should this package be marked as abandoned or some message be added to the top of the readme to tell users its no longer needed or supported?

As your Readme says, you're only responding to new issues regarding supported PHP versions, however this package doesn't provide anything for PHP 7.1+?

divinity76 commented 5 years ago

an argument could be made for:

Zend maintains 5.6 until "at least" 31 December 2020, for their customers. (source: https://www.zend.com/en/support-center/support/php-long-term-support )

Debian LTS Team maintains 5.6 until 30 June 2020 (source: https://www.debian.org/releases/jessie/ )

Canonical maintains 5.6 until April 2022 for their customers (source: https://ubuntu.com/blog/ubuntu-14-04-esm-support )

and i think Red Hat is maintaining a 5.6 branch too

paragonie-scott commented 5 years ago

This is a polyfill library. It's kind of an exception to our usual policy.

divinity76 commented 5 years ago

This is a polyfill library. It's kind of an exception to our usual policy.

but the README.md states

Although this library should function in earlier versions of PHP, we will only consider issues relevant to supported PHP versions.

paragonie-scott commented 4 years ago

That line of the README was written when PHP 5.4 was still supported. I don't see a lot of value in changing it (upgrading to PHP 7.x-latest is a good idea for many reasons), but yes, it's an anachronism when you read it today.