Skip to content

gson is in maintenance mode - should we be concerned? #2595

Description

@Mark-J-Lawrence

Background

It's been brought up by a member of my team that gson is in maintenance mode, and although they state on their github README that bugs will be fixed, releases are a bit few & far between to feel safe in the age of fast security vulnerability exploitation etc.....though it does have a lot of users, who may go in and deliver fixes.

Is there any reason we couldn't move to org.json.* libraries? I expect it doesn't cater for everything done within the Galasa code, and could be slow for users. But, it comes with zero dependencies, so is future proof.

There is then Moshi, or jackson.

Either way, changing the JSON library may break a lot of users. this could end up in a horrific amount of deprecated methods for a few releases so users aren't broken :/

Tasks

  • <task>

Metadata

Metadata

Assignees

No one assigned

    Labels

    Needs ReviewThis work item needs reviewing by a member of the dev teamcics

    Type

    Projects

    Status
    📋 5 Backlog

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions