Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[Update Request] Update Project EOL component github.com/beevik/etree:v1.1.0 #563

Open
anurag-deshpande opened this issue Apr 2, 2024 · 0 comments

Comments

@anurag-deshpande
Copy link

anurag-deshpande commented Apr 2, 2024

[Problem Description]
We are consuming crewjam/saml version 0.4.14, which is latest as of date. This package is scanned for security vulnerabilities and EOLs by blackduck scanner at our source.

The blackduck scanner has identified a Project EOL component, github.com/beevik/etree:v1.1.0, which is a transitive dependency of crewjam/saml version 0.4.14. This project is not maintained and thus EOLed much earlier.

[Request]
We wish to consume all the dependencies which are non-EOLed, to maintain good coding practices. Can this EOLed component be updated by crewjam contributors or replaced with some alternative with similar functionality, to reduce the EOL risk?

Let me know if any more information is needed for this issue.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant