libsodium-php icon indicating copy to clipboard operation
libsodium-php copied to clipboard

Archive Repository?

Open paragonie-security opened this issue 4 years ago • 2 comments

Given that the PHP versions older than 7.4 are unsupported and libsodium support landed in PHP 7.2, it may be a good idea to deprecate/archive this repository and point people towards newer versions of the PHP language.

The builds will continue to be available from PECL for PHP 5.x, 7.0, and 7.1 users, but everyone on 7.2+ is better served by simply enabling ext/sodium when building PHP.

However, it's possible that there is still some sector of the PHP community that depends heavily on this code repository for operational reasons. If this is true, I am not aware of any such group.

This leads me to my questions:

  1. Is there any reason to keep this repository open?
  2. If not, should we archive it and tell users to use modern PHP instead of relying on PECL?

paragonie-security avatar Mar 23 '22 19:03 paragonie-security

There are probably LTS distributions that still ship with PHP < 7.4, as well as people not upgrading the PHP version because it could break things.

But... yes... the right thing to do is to recommend upgrading using the extension that ships with PHP at this point.

I'm not sure that we are at feature parity though. The PECL extension may still have things that are not in the PHP extension.

jedisct1 avatar Mar 23 '22 20:03 jedisct1

We're going to be updating the PHP extension soon to add another feature. I'll make a note to audit the feature offerings to ensure it has everything from PECL. (It already has anything I contributed.)

paragonie-security avatar Mar 24 '22 00:03 paragonie-security