Hi, I'm the maintainer of the `espresso` [0] package in Fedora and EPEL8, and one of the developers of the software. I'm following the documented procedure [1] to retire this package from EPEL8. I will continue to maintain it in Fedora. The EPEL8 package has been lagging behind and I don't have enough time to maintain it to the quality standard it deserves. The software is evolving quickly upstream and leverages extremely recent compilers and libraries, such as those available in Fedora Rawhide. Reconciling this fast development cycle with the long-term stability goals of EPEL can prove challenging. There are also two security issues [3,4] reported against the package with disputed severity. Users of this package can build the software locally from sources with a smaller set of features at configure time to disable deprecated build dependencies, and leverage Python virtual environments to find a compatible set of runtime dependencies that aren't affected by CVEs. Best regards, Jean-Noël Grad ESPResSo project maintainer [0] https://src.fedoraproject.org/rpms/espresso [1] https://docs.fedoraproject.org/en-US/epel/epel-policy-retirement/ [2] https://bugzilla.redhat.com/show_bug.cgi?id=2221053 [3] https://bugzilla.redhat.com/show_bug.cgi?id=2221027 -- _______________________________________________ epel-devel mailing list -- epel-devel@xxxxxxxxxxxxxxxxxxxxxxx To unsubscribe send an email to epel-devel-leave@xxxxxxxxxxxxxxxxxxxxxxx Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/epel-devel@xxxxxxxxxxxxxxxxxxxxxxx Do not reply to spam, report it: https://pagure.io/fedora-infrastructure/new_issue
