Gary,

On 4.11.2024 19:36, Gary Gregory wrote:
If you modularize, then put pack200 in a module... the reason it's there is
because some apps broke when Java removed the functionality.

Sure, I can do it, but one of the opportunities of a major release is to remove the code that is outdated and no longer used. JEP 367 states:

> The deprecation-for-removal of Pack200 in JDK 11 was proposed <https://mail.openjdk.java.net/pipermail/jdk-dev/2018-June/001340.html> and confirmed <https://mail.openjdk.java.net/pipermail/jdk-dev/2018-June/001358.html> in June 2018, with no further interest in the topic since that time.

Do you have some concrete examples of Pack200 users that the OpenJDK project missed? From what I could gather:

* The last user question about Pack200 was in October 2021[1], I didn't find any questions before.

* Since 2020 there are three `dev@commons` threads linked to problems with Pack200 and Apache Harmony ([3], [4] and [5]).

* In February you published CVE-2024-26308[6] for a problem in Pack200.

Even if we publish Commons Compress 2.0.0, the 1.x branch isn't going anywhere for some time. Pack200 might be left in that branch.

Piotr

[1] https://openjdk.org/jeps/367

[2] https://lists.apache.org/thread/mctqbmt5jntrhp2wf2xyg7grrfk7yx2r

[3] https://lists.apache.org/thread/jgt9hck16sdlwx0y2b684xfdpqwf836d

[4] https://lists.apache.org/thread/v1m9djh1pyy35h9z4by7rro4yz1kgwov

[5] https://lists.apache.org/thread/v4x09d5bl7hxb0tsrp02ntl7qtnjt2ps

[6] https://www.cve.org/CVERecord?id=CVE-2024-26308



---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscr...@commons.apache.org
For additional commands, e-mail: dev-h...@commons.apache.org

Reply via email to