[Aide] Long-term Support Concerns for aide dependencies

[Richard van den Berg]

Hello Adithya,


On 06/11/2025 07:46, Adithya.Balakumar at toshiba-tsip.com wrote:
> [...]
> According to Freexian's[3] assessment, these packages are flagged as 
> at-risk for long-term support, primarily due to insufficient upstream 
> activity in their respective projects (*mhash *and *liblockfile*).
>
> Given that these are core dependencies for aide, we'd like to understand:
>
>  *
>     Whether there are any plans to address the long-term
>     maintainability of aide and aide-common in light of these upstream
>     concerns.
>  *
>     If alternative dependencies or migration paths are being considered.
>

I understand your concerns. The upstream mhash repository[1] seems 
pretty stale but there are many Linux distributions that include it and 
provide support for it, like Debian [2,3]. The same goes 
for liblockfile[4] which is also actively supported by Debian[5,6] and 
other Linux distributions.


Kind regards,


Richard van den Berg


[1]: https://sourceforge.net/p/mhash/code/merge-requests/

[2]: https://tracker.debian.org/pkg/mhash

[3]: https://tracker.debian.org/media/packages/m/mhash/changelog-0.9.9.9-10

[4]: https://sourceforge.net/p/mhash/code/merge-requests/

[5]: https://tracker.debian.org/pkg/liblockfile

[6]: 
https://tracker.debian.org/media/packages/libl/liblockfile/changelog-1.17-2

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://www.ipi.fi/pipermail/aide/attachments/20251115/867513b7/attachment.htm>