capistrant commented on PR #18227: URL: https://github.com/apache/druid/pull/18227#issuecomment-3069869610
> We should also evaluate if we want to continue keeping the extension around. It's not being actively maintained and comes under discussion only at the release time and there is a CVE to resolve. Let me know if dev mailing list is a better place to start this discussion on. Thanks @abhishekagarwal87 I agree! I have started some adjacent dev threads in apache Druid mailing list. one such is changing our support for contirb extensions in a way that would stop actively scanning for CVEs. The extensions would instead be offered as is and only maintained with best effort. I do agree we should potentially consider processes for removing (archiving?) contrib extensions if they seem not useful or extremely low usage. -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected] --------------------------------------------------------------------- To unsubscribe, e-mail: [email protected] For additional commands, e-mail: [email protected]
