Package: ftp.debian.org Severity: wishlist Hi (cc: jvim maintainer),
jvim is fork of vim version 3, and its upstream was already dead. I'm afraid that there are same vulnerabilities as original vim (but no one investigated it, so not sure). https://security-tracker.debian.org/tracker/source-package/vim And jvim package is not updated for 10 years, not good shape as Debian package :( popcon rate is low, 13 users. https://qa.debian.org/popcon.php?package=jvim I've asked about jvim features would be already merged to vim to some Japanese vim expert via twitter, and they say "some are merged but not fully done it". However, now vim has "plugins", so if someone want jvim feature, they can implement it. So, I suggest to remove jvim package from repository (or update its code base on Vim8.x). -- Hideki Yamane <[email protected]>

