spark-dependencies icon indicating copy to clipboard operation
spark-dependencies copied to clipboard

Is this project dead? I see tons of CVEs in the scan, plus there has been no recent update on this project

Open pankdhnd opened this issue 2 years ago • 1 comments

What happened?

There has been no update on this project since long, the project also has tons of CVEs which makes it vulnerable to use.

Steps to reproduce

--

Expected behavior

--

Relevant log output

No response

Screenshot

No response

Additional context

No response

Jaeger backend version

No response

SDK

No response

Pipeline

No response

Stogage backend

No response

Operating system

No response

Deployment model

No response

Deployment configs

No response

pankdhnd avatar Dec 16 '22 10:12 pankdhnd

We have created a fork where we have overridden the dependencies which have critical security vulnerabilities: https://github.com/DIPSAS/spark-dependencies

tronda avatar Nov 10 '23 14:11 tronda

the dependencies have been recently upgraded

yurishkuro avatar May 28 '24 16:05 yurishkuro