[EDGRESOLV-10] Archive repository Created: 11/Mar/22 Updated: 31/May/22 Resolved: 31/May/22 |
|
| Status: | Closed |
| Project: | ARCHIVED: edge-resolver |
| Components: | None |
| Affects versions: | None |
| Fix versions: | None |
| Type: | Bug | Priority: | TBD |
| Reporter: | Julian Ladisch | Assignee: | Julian Ladisch |
| Resolution: | Done | Votes: | 0 |
| Labels: | security, security-reviewed | ||
| Remaining Estimate: | Not Specified | ||
| Time Spent: | Not Specified | ||
| Original estimate: | Not Specified | ||
| Issue links: |
|
||||||||||||
| Sprint: | |||||||||||||
| Development Team: | EBSCO - FSE | ||||||||||||
| RCA Group: | TBD | ||||||||||||
| Description |
|
Archive this repository because the use case for this edge module no longer exists. How to archive: https://dev.folio.org/faqs/how-to-archive-repository/ edge-resolver has many direct and indirect dependencies that have known vulnerabilities: https://mvnrepository.com/artifact/io.vertx/vertx-core/3.5.4 https://mvnrepository.com/artifact/log4j/log4j/1.2.17 including https://nvd.nist.gov/vuln/detail/CVE-2022-23307 https://mvnrepository.com/artifact/org.slf4j/slf4j-log4j12/1.7.25 Please explain why edge-resolver is not affected by them, or bump the dependency versions, or archive this repository (
|
| Comments |
| Comment by Jakub Skoczen [ 17/Mar/22 ] |
|
Oleksii Petrenko This module is not on the Module-Team matrix, could you please check if this module has a development team or if this should be removed from FOLIO? Thanks. |
| Comment by Axel Dörrer [ 24/Mar/22 ] |
|
Matt Reno the security team would like to know if this is still used and if not if it could be removed from the repo, thanks. |
| Comment by Matt Reno [ 24/Mar/22 ] |
|
I believe we've requested this repo to be archived. Perhaps that was not communicated properly. The use case for this edge module no longer exists and it does not need to be part of FOLIO. |
| Comment by Julian Ladisch [ 12/May/22 ] |
|
Matt Reno: Can you archive https://github.com/folio-org/edge-resolver as explained on https://dev.folio.org/faqs/how-to-archive-repository/ ? Thanks! |
| Comment by Matt Reno [ 12/May/22 ] |
|
Julian Ladisch: I don't have admin permissions for this repo. |
| Comment by Julian Ladisch [ 12/May/22 ] |
|
Matt Reno Can you complete these tasks from https://dev.folio.org/faqs/how-to-archive-repository/ :
|