[
https://issues.apache.org/jira/browse/JSPWIKI-794?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=18040166#comment-18040166
]
Alex O'Ree commented on JSPWIKI-794:
------------------------------------
sandler was replaced with the linked ticket
json-rpc was removed with the jakarta upgrade
oro, attempted to replace it with the JDK's regex engine. 125 test failures..
so not great. i might retry using jregex but it's a bit of work to switch it
ecs appears to have been removed already
hudson i found a replacement for, under PR now
freshcookies, luckily the source is on maven central and i was able to build it
locally. looks like it's primarily used for the jspwiki policy file stuff and
some SSL/certificate helper stuff. Ran spotbugs against the code, 29 issues.
nothing super bad that would affect jspwiki's performance or stability
> Upgrade various JSPWiki dependencies
> ------------------------------------
>
> Key: JSPWIKI-794
> URL: https://issues.apache.org/jira/browse/JSPWIKI-794
> Project: JSPWiki
> Issue Type: Improvement
> Reporter: Glen Mazza
> Priority: Major
> Labels: pull-request-available
>
> These can be turned into subtasks when the decision to upgrade each one is
> made:
> Sandler: used for Atom messages (http://sourceforge.net/**
> projects/sandler/ <http://sourceforge.net/projects/sandler/> -- but
> website linked to from there is dead). Last updated 2004. Switch to
> Apache Abdera?
> json-rpc: now called jabsorb
> (http://code.google.com/p/**jabsorb/<http://code.google.com/p/jabsorb/>),
> hasn't been updated in about 3 years. Likewise no longer needed? Just use
> CXF REST w/JSON perhaps.
> Jakarta Oro
> (http://jakarta.apache.org/**oro/index.html<http://jakarta.apache.org/oro/index.html>)
> in the Apache Attic, replace with Java or commons-* products?
> Jakarta ecs:ecs A markup language, also in the Attic since 2010: (
> http://jakarta.apache.org/**ecs/ <http://jakarta.apache.org/ecs/>),
> unsure what to replace it with.
> org.jvnet.hudson:org.**suigeneris.jrcs.diff - now at
> http://code.google.com/p/jrcs/**, last updated 3 years 3 months ago, from
> the website: "JRCS is a library that knows how to manipulate the archive
> files produced by the RCS and CVS version control systems." IIRC Harry
> deprecated RCS a few months back, we may not need this library at all
> anymore. That it links to CVS (not Subversion or Git/GitHub) further
> indicates its age.
> freshcookies security -- Done by Andrew J. of our team (
> http://mvnrepository.com/**artifact/org.freshcookies/**
> freshcookies-security/0.60<http://mvnrepository.com/artifact/org.freshcookies/freshcookies-security/0.60>),
> but the website for it is dead: http://www.freshcookies.org/ -- I don't
> know when it was last updated, and haven't researched yet what this library
> does. Need to look for a replacement library (Apache Shiro perhaps?)
--
This message was sent by Atlassian Jira
(v8.20.10#820010)
