Library/Project Seemingly Abandoned

[ixis-doug]

This library appears to have no maintainer; the last merge was in 2014. There is a PR (#8) open for nearly 3 years that fixes submodule paths. This library is still referenced in recent literature around the web wrt working with the (GTM) dataLayer, and its abandoned status should be clearly called out in the README or a new maintainer chosen.

[ixis-doug]

Note there is also no bot keeping dependencies up-to-date

found 72 vulnerabilities (14 low, 21 moderate, 37 high)

[ixis-doug]

@bnkuhn merging #8 does not resolve this issue; that was just one example. If you try to pull down this repo and build it, you will run into a host issues...

• various build scripts depend on python 2 (referenced as python -- this is an outdated assumption in most systems)
• unclear what Java version is required for the closure compiler build process(es)
• as mentioned in comment, 72 vulnerabilities in dependencies

Furthermore, the complicated build pipeline (which includes google-specific tooling such as the closure compiler) makes "fork and fix yourself" an impractical option.