[GitHub] [maven-resources-plugin] patpatpat123 commented on pull request #21: A desperate PR to ask if it is possible to keep this repo relevant by upgrading its (full of CVEs) dependencies please :)

[GitBox <gi...@apache.org>]

patpatpat123 commented on PR #21:
URL: https://github.com/apache/maven-resources-plugin/pull/21#issuecomment-1111167058

   Hello @khmarbaise ,
   
   Wanted to say thank you for your answer here, as well as your numerous answers on StackOverflow.
   
   My goal for this PR is not to be accepted, but rather highlight the current repo is using technologies known and agreed to be EOL.
   
   Furthermore, it is also relying on dependencies that are both outdated and vulnerable.
   
   Finally, ```final``` was definitely not the point.
   
   Can you or  anyone here who has agreed to the license and has the Jira account copy paste the pom, or come up with a pom that will put this project in a more secure and up to date place by updating relevant dependencies please?
   
   Or questions, are contributors / creators / maintainers or this project fine with its current status?
   
   Thank you 


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: issues-unsubscribe@maven.apache.org

For queries about this service, please contact Infrastructure at:
users@infra.apache.org