github.com/tarm/serial dependency dormant since 2018

Question

github.com/tarm/serial dependency dormant since 2018

major opened this issue a year ago · comments

I maintain the Fedora package for guest-agent in Fedora and it still has a dependency on github.com/tarm/serial. However, that repository hasn't seen updates since 2018.

Would it be possible to use a newer, more recently updated dependency in the project instead? Thanks!

Leandro Dorileo · Answer 1 · Tue Sep 19 2023 12:48:53 GMT+0800 (China Standard Time)

Hi @major

Is it an issue with fedora packaging policies? For alternate lib this one seems to be more active though: https://pkg.go.dev/go.bug.st/serial#section-readme

Major Hayden · Answer 2 · Fri Sep 22 2023 02:00:36 GMT+0800 (China Standard Time)

@dorileo Well, it can be challenging to package something that is no longer maintained, especially if a vulnerability is found or a bug pops up. It looks like that one has a slightly different API.