Development and maintenance of Any23 is not happening. The last
(non-dependabot related!) commit was Apr 12, 2022
The board asked for a roll-call and got the minimum of three responses
for PMC members watching the project.
However, maintenance of keeping the code up-to-date with updates isn't
happening, including dependencies with security issues.
The Any23 PMC believes the best course of action is to retire the
project and move Any23 into the Apache Attic.
The attic is not one-way - a project can reboot if three+ people want to
contribute, form a new PMC, and bring it back out. With ASF members
involved, it does not necessarily have to return via the incubator.
The Attic process means:
* git becomes read-only - it can still be cloned and forked
* archived releases, including 2.7, remain accessible
https://archive.apache.org/dist/any23/
* all maven artifacts remain accessible
* the current release area is closed down
* mailing lists are closed down
* the automated build is turned off
Andy
on behalf of the Any23 PMC
