spark-dependencies
spark-dependencies copied to clipboard
Is this project dead? I see tons of CVEs in the scan, plus there has been no recent update on this project
What happened?
There has been no update on this project since long, the project also has tons of CVEs which makes it vulnerable to use.
Steps to reproduce
--
Expected behavior
--
Relevant log output
No response
Screenshot
No response
Additional context
No response
Jaeger backend version
No response
SDK
No response
Pipeline
No response
Stogage backend
No response
Operating system
No response
Deployment model
No response
Deployment configs
No response
We have created a fork where we have overridden the dependencies which have critical security vulnerabilities: https://github.com/DIPSAS/spark-dependencies
the dependencies have been recently upgraded