sagebind / isahc

The practical HTTP client that is fun to use.
https://docs.rs/isahc
MIT License
705 stars 62 forks source link

Maintenance status? #435

Open oherrala opened 4 months ago

oherrala commented 4 months ago

It seems this crate has not seen activity in the past two years (last commit 2022-11-07). What is the maintenance status?

Ping @sagebind. If this crate is not maintained any longer it would be good to state so.

I opened RustSec advisory-db issue (https://github.com/rustsec/advisory-db/issues/1954) and I can file unmaintained advisory there if needed.

jplatte commented 4 months ago

There's been an update on the maintenance status here: https://github.com/sagebind/isahc/issues/432#issuecomment-1948497796

I think rustsec unmtaintained entries often do more harm than good, see Armin Ronacher's recent article for instance.

sagebind commented 4 months ago

Hi there! Yes, depending on how you define "unmaintained", you might consider Isahc temporarily unmaintained. Due to just my life circumstance at the moment, I have very little time to work on Isahc, and am much more likely to spend that little time I have elsewhere.

There is a plan for a version 2.0, but there's still quite a bit of remaining work to get it done, and I am not working on that right now.

However, if an actual security vulnerability or notable bug were to be reported on 1.x, I would scrape up the time to address it in a timely manner to the best of my ability. There have not been any such issues recently, so there hasn't been any repo activity.