On Wed, Sep 16, 2026 at 09:16:00PM +0500, Andrey Rakhmatullin wrote: > I don't think "use a dead version of WebKitGTK with no security > updates" on release architectures is good tbh.
Applications that only want to display trusted content from local files can probably live with a dead version of the package, so those are the ones I was mostly thinking about. And as far as I'm aware we already have web engines without security updates (see [1]), but other than that I don't actually disagree with your general point. Regards, Berto [1] https://www.debian.org/releases/trixie/release-notes/issues.en.html#security-status-of-web-browsers-and-their-rendering-engines
