You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@camel.apache.org by "squakez (via GitHub)" <gi...@apache.org> on 2023/05/04 14:52:28 UTC
[GitHub] [camel-k] squakez opened a new issue, #4326: Remove unused/unmaintained dependencies
squakez opened a new issue, #4326:
URL: https://github.com/apache/camel-k/issues/4326
In order to reduce any possible impact on CVEs we should reduce the surface areas from our dependencies which are used for some simple func or are not maintained any longer. This is the list I've identified:
- github.com/fatih/camelcase v1.0.0
- github.com/fatih/structs v1.1.0
- github.com/gertd/go-pluralize v0.2.1
- github.com/go-logr/logr v1.2.4
- github.com/google/uuid v1.3.0
- github.com/mattn/go-shellwords v1.0.3
- github.com/mitchellh/go-homedir v1.1.0
- github.com/radovskyb/watcher v1.0.7
- github.com/scylladb/go-set v1.0.2
- github.com/shurcooL/httpfs v0.0.0-20190707220628-8d4bc4ba7749
- github.com/shurcooL/vfsgen v0.0.0-20181202132449-6a9ea43bcacd
- gopkg.in/inf.v0 v0.9.1
We should to identify actively maintained dependencies or just develop our own func when we are using them for one funcs or two.
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: commits-unsubscribe@camel.apache.org.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
[GitHub] [camel-k] squakez closed issue #4326: Remove unused/unmaintained dependencies
Posted by "squakez (via GitHub)" <gi...@apache.org>.
squakez closed issue #4326: Remove unused/unmaintained dependencies
URL: https://github.com/apache/camel-k/issues/4326
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: commits-unsubscribe@camel.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
[GitHub] [camel-k] squakez commented on issue #4326: Remove unused/unmaintained dependencies
Posted by "squakez (via GitHub)" <gi...@apache.org>.
squakez commented on issue #4326:
URL: https://github.com/apache/camel-k/issues/4326#issuecomment-1557333664
- github.com/google/uuid v1.3.0 is okey to keep. No further dependencies and it is a stable development.
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: commits-unsubscribe@camel.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
[GitHub] [camel-k] gansheer commented on issue #4326: Remove unused/unmaintained dependencies
Posted by "gansheer (via GitHub)" <gi...@apache.org>.
gansheer commented on issue #4326:
URL: https://github.com/apache/camel-k/issues/4326#issuecomment-1572179689
Ha yes sorry, I mixed my numbers ! But it is as you said, we need to ensure we don't break that feature again.
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: commits-unsubscribe@camel.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
[GitHub] [camel-k] squakez commented on issue #4326: Remove unused/unmaintained dependencies
Posted by "squakez (via GitHub)" <gi...@apache.org>.
squakez commented on issue #4326:
URL: https://github.com/apache/camel-k/issues/4326#issuecomment-1572176652
Maybe this one? https://github.com/apache/camel-k/pull/4428 - there were a few CLI that I assumed were not used at all. If they are we can revert them for sure. I trusted all checks were good, so, in case we discover some important stuff, we need to add some proper validation as well.
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: commits-unsubscribe@camel.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
[GitHub] [camel-k] gansheer commented on issue #4326: Remove unused/unmaintained dependencies
Posted by "gansheer (via GitHub)" <gi...@apache.org>.
gansheer commented on issue #4326:
URL: https://github.com/apache/camel-k/issues/4326#issuecomment-1572169621
There is an issue with these removals : #4448.
The CRDs are not deployed in local when they are changed by the `kamel install` CLI command. I will check what is the source of this issue in the removed code and revert it. I will add some test if I can.
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: commits-unsubscribe@camel.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
[GitHub] [camel-k] gansheer commented on issue #4326: Remove unused/unmaintained dependencies
Posted by "gansheer (via GitHub)" <gi...@apache.org>.
gansheer commented on issue #4326:
URL: https://github.com/apache/camel-k/issues/4326#issuecomment-1536239990
We also have in the golang code imports "github.com/pkg/errors". The github repo has been archived.
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: commits-unsubscribe@camel.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org