Skip to content
This repository has been archived by the owner on Feb 27, 2024. It is now read-only.

Things that should be resolved around this project as it hinders takari-lifecycle #1

Open
cstamas opened this issue Feb 9, 2024 · 0 comments

Comments

@cstamas
Copy link
Member

cstamas commented Feb 9, 2024

This project seems pretty much dead, last several releases were not pushed to repo.

And related issues just accumulate:

  • Support ed25519 PGP keys takari-lifecycle#125 could not release from my new desktop due this
  • org.bouncycastle:bcprov-jdk15on:1.70 is flagged with:
    • [CVE-2023-33202] CWE-400: Uncontrolled Resource Consumption ('Resource Exhaustion')
    • is stale and needs update as bouncycastle released quite few new releases since 1.70

I'd propose to drop this project, and continue with some fresh one, for example from here:
s4u/sign-maven-plugin#167

@cstamas cstamas changed the title More and more issues Things that should be resolved around this project as it hinders takari-lifecycle Feb 9, 2024
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant