What is the maintenance status of this project?

[williammartin]

Description

In gh, we've had a long outstanding PR to use this module for secure credential management.

Looking at the repo commit history, community interactions (or lack thereof), and dependent forks, it's not clear to me what the maintenance status of this project is.

I totally understand that ongoing maintenance of a project like this is burdensome, and might not be something 99designs or individuals want to continue with, but I do hope y'all (maybe @mtibben?) can offer some guidance on what potential consumers of this project might be able to expect in the short term or long term?

Cheers!

[ghthor]

I'm really looking forward to the gh-cli storing my non-expiring GH token inside a password store on linux. I hope we hear back soon on this question.

[williammartin]

@ghthor sorry if you already responded but I couldn't spot your name in any of the existing threads. What about the current approach doesn't work for you on Linux? The primary intention of moving over to this project was to avoid providing excess privileges to the security binary on MacOS.

[ghthor]

@williammartin On linux the GH Token secret is stored in plaintext on disk

[williammartin]

gh tries to store the token in your keyring using https://github.com/zalando/go-keyring/blob/b38ab4b7224a1f2d243fc35cd3a646ad1cdcdf40/keyring_unix.go#L17 on linux. There's no blocker, requiring us to use this library. Feel free to file an issue on cli/cli explaining your setup and hopefully we can help you out.