[EDGRESOLV-10] Archive repository Created: 11/Mar/22  Updated: 31/May/22  Resolved: 31/May/22

Status: Closed
Project: ARCHIVED: edge-resolver
Components: None
Affects versions: None
Fix versions: None

Type: Bug Priority: TBD
Reporter: Julian Ladisch Assignee: Julian Ladisch
Resolution: Done Votes: 0
Labels: security, security-reviewed
Remaining Estimate: Not Specified
Time Spent: Not Specified
Original estimate: Not Specified

Issue links:
Relates
relates to EDGRESOLV-11 edge-resolver - Morning Glory 2022 R2... Closed
relates to EDGRESOLV-9 Upgrade edge-resolver to Java 11, or ... Closed
Sprint:
Development Team: EBSCO - FSE
RCA Group: TBD

 Description   

Archive this repository because the use case for this edge module no longer exists.

How to archive: https://dev.folio.org/faqs/how-to-archive-repository/


edge-resolver has many direct and indirect dependencies that have known vulnerabilities:

https://mvnrepository.com/artifact/io.vertx/vertx-core/3.5.4

https://mvnrepository.com/artifact/log4j/log4j/1.2.17 including https://nvd.nist.gov/vuln/detail/CVE-2022-23307

https://mvnrepository.com/artifact/org.slf4j/slf4j-log4j12/1.7.25

Please explain why edge-resolver is not affected by them, or bump the dependency versions, or archive this repository ( FOLIO-1838 Open and FOLIO-1710 Closed ; note that it can always be re-instated if needed).



 Comments   
Comment by Jakub Skoczen [ 17/Mar/22 ]

Oleksii Petrenko This module is not on the Module-Team matrix, could you please check if this module has a development team or if this should be removed from FOLIO? Thanks.

Comment by Axel Dörrer [ 24/Mar/22 ]

Matt Reno the security team would like to know if this is still used and if not if it could be removed from the repo, thanks.

Comment by Matt Reno [ 24/Mar/22 ]

I believe we've requested this repo to be archived. Perhaps that was not communicated properly. The use case for this edge module no longer exists and it does not need to be part of FOLIO.

Comment by Julian Ladisch [ 12/May/22 ]

Matt Reno: Can you archive https://github.com/folio-org/edge-resolver as explained on https://dev.folio.org/faqs/how-to-archive-repository/ ? Thanks!

Comment by Matt Reno [ 12/May/22 ]

Julian Ladisch: I don't have admin permissions for this repo.

Comment by Julian Ladisch [ 12/May/22 ]

Matt Reno Can you complete these tasks from https://dev.folio.org/faqs/how-to-archive-repository/ :

  • Add notice section to README
  • Adjust the About description
Generated at Thu Feb 08 22:29:31 UTC 2024 using Jira 1001.0.0-SNAPSHOT#100246-sha1:7a5c50119eb0633d306e14180817ddef5e80c75d.