From richard at vdberg.org Sat Nov 15 14:32:10 2025 From: richard at vdberg.org (Richard van den Berg) Date: Sat, 15 Nov 2025 13:32:10 +0100 Subject: [Aide] Long-term Support Concerns for aide dependencies In-Reply-To: References: Message-ID: Hello?Adithya, On 06/11/2025 07:46, Adithya.Balakumar at toshiba-tsip.com wrote: > [...] > According to Freexian's[3] assessment, these packages are flagged as > at-risk for long-term support, primarily due to insufficient upstream > activity in their respective projects (*mhash *and *liblockfile*). > > Given that these are core dependencies for aide, we'd like to understand: > > * > Whether there are any plans to address the long-term > maintainability of aide and aide-common in light of these upstream > concerns. > * > If alternative dependencies or migration paths are being considered. > I understand your concerns. The upstream mhash repository[1] seems pretty stale but there are many Linux distributions that include it and provide support for it, like Debian [2,3]. The same goes for?liblockfile[4] which is also actively supported by Debian[5,6] and other Linux distributions. Kind regards, Richard van den Berg [1]: https://sourceforge.net/p/mhash/code/merge-requests/ [2]: https://tracker.debian.org/pkg/mhash [3]: https://tracker.debian.org/media/packages/m/mhash/changelog-0.9.9.9-10 [4]: https://sourceforge.net/p/mhash/code/merge-requests/ [5]: https://tracker.debian.org/pkg/liblockfile [6]: https://tracker.debian.org/media/packages/libl/liblockfile/changelog-1.17-2 -------------- next part -------------- An HTML attachment was scrubbed... URL: