On Tue, Aug 28, 2018 at 8:49 AM Vít Ondruch <vondr...@redhat.com> wrote:
> > So this is the email announcing orphaning js-jquery1: > > > https://lists.fedoraproject.org/archives/list/devel@lists.fedoraproject.org/message/MI7W7TT3MUGMQTLYZYE5FKXUJCKFUXU7/ > > But apparently it is used by more packages then just a few. So is there > somebody, who would be willing (more than me) to keep the package alive? > > > V. > > Given the security vulnerabilities in jQuery 1 (and 2) and the fact that upstream dropped them a long time ago, I strongly recommend the packages be retired than kept alive. Packagers depend on the newer js-jquery (3) instead, patching as needed. I plan on migrating accumulo to use the newer js-jquery soon, but I need the maintainer of nodejs-flot to do so first. ( https://bugzilla.redhat.com/show_bug.cgi?id=1623115)
_______________________________________________ devel mailing list -- devel@lists.fedoraproject.org To unsubscribe send an email to devel-le...@lists.fedoraproject.org Fedora Code of Conduct: https://getfedora.org/code-of-conduct.html List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/devel@lists.fedoraproject.org
