>    Getting off to what? Xerces-C++, with all its warts, is the only working,
>    open source XML Schema implementation for C/C++. And I know for a fact
>    that it is being used without much problems by quite a few people.

That's not relevant to the question. "There is nothing" is a real world answer, 
though I thought libxml2 had schema support also. I haven't checked it in a 
long time and it was moving that way even back when I picked Xerces.

People use EOL software all the time. People don't make rational decisions a 
lot of the time because they think the risk is outweighed by the cost, and that 
goes great until it doesn't.

>    What I think would be reasonable to state is that the project, due to
>    limited resources, may not be able to promptly fix bugs and security
>    vulnerabilities.

That is disqualifying for production software. But let's just agree to 
disagree. You're not going to convince me and I'm not in the "convincing" 
business.

If the rest of the PMC agrees to post such a warning, then I will when I update 
the site for the release.

-- Scott


Reply via email to