incubator-devlake icon indicating copy to clipboard operation
incubator-devlake copied to clipboard

Consider removing easyjson dependency due to sanction concerns

Open pjfanning opened this issue 10 months ago • 1 comments

Search before asking

  • [x] I had searched in the issues and found no similar feature requirement.

Use case

Security Researchers Warn a Widely Used Open Source Tool Poses a 'Persistent' Risk to the US

https://www.wired.com/story/easyjson-open-source-vk-ties/

Description

No response

Related issues

No response

Are you willing to submit a PR?

  • [ ] Yes I am willing to submit a PR!

Code of Conduct

pjfanning avatar May 06 '25 12:05 pjfanning

Thanks for the information. Does it mean we should remove the library from our codebase?

klesh avatar May 13 '25 03:05 klesh

This issue has been automatically marked as stale because it has been inactive for 60 days. It will be closed in next 7 days if no further activity occurs.

github-actions[bot] avatar Jul 13 '25 00:07 github-actions[bot]

This issue has been closed because it has been inactive for a long time. You can reopen it if you encounter the similar problem in the future.

github-actions[bot] avatar Jul 20 '25 00:07 github-actions[bot]