After evaluating dependencies, required further changes and mostly
maintainability for security and packaging it was decided there are too
many concerns - not about any single package in particular, but the
overall Mailman3 stack - about the ability to maintain and monitor it as
well as we need it
** Changed in: python3-openid (Ubuntu)
Assignee: Ubuntu Security Team (ubuntu-security) => (unassigned)
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1820211
Title:
[MIR] python3-openid as depe
Thanks for the hint on the upstream discontinuation Eduardo.
This was a python3 fork of python-openid which in the meantime grew py3
support and seems to be the continued upstream project. We will need to
work in/with Debian to change building python3-openid binary out of a
recent python-openid so
I reviewed python3-openid version 3.1.0-1 as checked into disco as of this
writing.
This shouldn't be considered a full audit but rather a quick gauge of
maintainability.
python3-openid is a set of python packages to support use of the OpenID
decentralized identity system in your application.
- N
[Duplication]
No duplication of that functionality in the Archive in general or main in
particular.
[Embedded sources and static linking]
This package does not contain embedded library sources.
This package does not statically link to libraries.
No Go package
[Security]
I can confirm that there
