search

quartz-scheduler / quartz

Code for Quartz Scheduler
http://www.quartz-scheduler.org
Apache License 2.0
6.17k stars 1.91k forks source link

Quartz Scheduler is abandoned #1134

Open lprimak opened 2 months ago

lprimak commented 2 months ago

Update: Quartz Scheduler is abandoned.

Can anyone with knowledge shine light on this? To me, it looks abandoned. No commits this year at all, CVEs not fixed, no issues answered, etc

Thank you

Yannis-01 commented 2 months ago

the same inquiry

IOhacker commented 2 months ago

x3

RichardBradley commented 2 months ago

There's some conflicting info from "Software AG" quoted in this thread from April 2023: https://github.com/quartz-scheduler/quartz/issues/839#issuecomment-1479458400

lprimak commented 2 months ago

@RichardBradley Thank you for pointing this out. Looks more and more abandoned to me.

lprimak commented 1 month ago

2 weeks with no response? I think the conclusion is obvious. Quartz Scheduler is abandoned.

bmertens911 commented 1 month ago

@lprimak @RichardBradley @Yannis-01 @IOhacker @Yannis-01 @vmptk @cunhaax - we've switched to https://github.com/jobrunr/jobrunr years ago and could not have been happier. Better performance, new features, an integrated dashboard and if you take a Pro version (which we needed for workflow support), you also get awesome support.

pbartoszek commented 1 month ago

bmertens911 jobrunr looks very nice. However open source free version doesn't seem to support transactional jobs :(. Pro version does support @Transactional and costs only $15k per year...

abccbaandy commented 1 month ago

@lprimak @RichardBradley @Yannis-01 @IOhacker @Yannis-01 @vmptk @cunhaax - we've switched to https://github.com/jobrunr/jobrunr years ago and could not have been happier. Better performance, new features, an integrated dashboard and if you take a Pro version (which we needed for workflow support), you also get awesome support.

jobrunr free version is 100% waste of time unless your project is just for fun. You can just check the PRO version feature in the doc, you will find out many "needed" feature is there.

And the author even add "trap" in the free version.

lprimak commented 1 month ago

Please stay on topic. The fact that jobrunr folks want to get paid for their work is not applicable to this particular discussion. This post isn't really meant as a recommendation for other projects or products in the space please.

melloware commented 1 week ago

@lprimak i agree the lack of a release cadence from a corporate backed library is disappointing.

However if you look at the branches there is a 2.4x branch they have been working on that supports Jakarta and has had more recent commits than 5 years ago. But still no release.

This project just needs more volunteers and stewards to watch it.

lprimak commented 1 week ago

There hasn't been a commit to any branches in a year and 3 months. Sorry, but it's clearly abandoned and I just don't see this being resurrected at all. Anybody can make a fork I guess, but I just don't see this happening

melloware commented 1 week ago

@lprimak i agree its dissapointing. I have Quartz in a few mission critical applications since 2014.

If you are looking for an alternative this one is Open Source but not as full featured as Quartz: https://github.com/lukas-krecan/ShedLock

bcode2 commented 1 week ago

I have been using version 2.4.0-rc2 without any issue almost for a year, but I agree, it seems the project updates goes very slowly. I just ask myself why those companies that use it do not contribute to the project. (Donations or code updates)

lprimak commented 1 week ago

@melloware I feel your pain. I know this sucks. We have the same issue with Apache Shiro. However, with security framework, we can't have dependencies where CVEs are not fixed.

Just to make my point clearer for others reading this:

Unfortunately, hoping that Quartz Scheduler will have any updates or releases in the future is just wishful thinking.

According to my (and others) research, maintainers were (are?) employed by Software AG, who is no longer sponsoring this project. It is clear that all maintainers moved on for over a year. If there was another company / entity who was interested in hiring the maintainers to work on this, it would have happened already. I also don't see the maintainers transferring ownership to anyone else to avoid the "xz" security issue, it's just too much risk.

If this was Apache project (I am Apache PMC member) this would have been long in the Attic. However, GitHub doesn't have such provisions, so if maintainers don't touch the project, nor will they archive it, it'll just sit there without any hint of it's "abandonment"

This is why I created this issue in the first place, to hopefully inform people of the facts of where Quartz stands.

All of this is unfortunate, and I don't like it anymore than anyone else, but facts need to be stated.

melloware commented 1 week ago

As a note I volunteered years ago to be a committer and also perform releases for Quartz and they rejected the idea. I know they said they were looking for help but I guess they were not serious about it.

Also the fact that it was purchased by Terracotta and then it looks like purchased by Software AG it seems they don't care. It's not mentioned anywhere on the software AG site.

melloware commented 5 days ago

OK some good news. I know someone who is in contact with Software AG and we may have some progress on this in the near-ish future.

bcode2 commented 4 days ago

Excellent!!!!,. If the project goes ahead and there will be someone reviewing and accepting pull requests count on me to do some contributions.

lprimak commented 3 days ago

While I am hopeful that @melloware gets somewhere with this, I would urge caution until the actual CVEs are fixed.