Abe Ratnofsky

> Based on my own experience with compliance audits it may not be problematic for the majority of end users, but I don't think we can authoritatively say the current...

> Our current manual auditing and use of mvn dependency:tree for SBOM isn't up to scratch post log4shell. This patch doesn't materially change any factors with respect to supply chain...

@michaelsembwever I'm happy to leave the ML thread open over the weekend, and in the meantime I can work on preparing patches for active branches.

@slachiewicz we've had some discussion about maintaining a fork: > I am strongly against maintaining a patched jar for a project we do not maintain... that burden is much higher...

> The documentation could probably use some more work, but I'd love guidance on where to focus that: the implementation class? Or reference.conf? I'd put configuration documentation in `reference.conf`. For...

Is there a reason you can't configure Pekko to use a custom session? It looks like that should be possible from this documentation: https://pekko.apache.org/docs/pekko-connectors/current/cassandra.html#custom-session-creation You can create a custom CqlSessionProvider...