|
Hi maintainers,
We are evaluating Eclipse Kanto as the edge runtime for a production IoT deployment (on-premise, container management + OTA + digital twins). We've been working with the v1.0.0 release and it fits our requirements well.
However, we've noticed that:
-
The last release across all components (suite-connector, container-management, file-upload, local-digital-twins, update-manager) was v1.0.0 on June 10, 2024 — over two years ago.
-
Several open issues have had no responses from maintainers.
-
Dependencies in the
go.mod files are pinned to versions with known CVEs (e.g., runc v1.1.12 has
CVE-2024-21626,
containerd v1.6.28 is EOL, paho.mqtt.golang v1.4.1 has
CVE-2025-10543). -
The Go runtime version specified (
go
1.17–1.19)
is itself out of support.
Our questions:
-
Is Eclipse Kanto still under active development? Are there plans for future releases?
-
Is there a roadmap for dependency updates? Specifically bumping containerd, runc, and golang.org/x/* to patch known vulnerabilities.
We'd like to understand the project's status before committing to it for a production deployment. If the project is in maintenance-only or archived status, we'd appreciate transparency so we can plan accordingly.
Thank you for your time.
|
Samuel Perez Fernandez
|
Adimen Konektatu eta hedatua
|
Inteligencia Conectada y Distribuida
|
Distributed and Connected Intelligence
|
|
|
|
|
|
Tel.: +34 943 71 24 00
|
|
Pº J. M. Arizmendiarrieta, 2 - 20500 Arrasate-Mondragón (Gipuzkoa)
|
|
|
|
|
|
|
![Logo]() |
|
|
• Mezu honen informazioa isilpekoa izan daiteke eta indarrean dagoen legediak babesten du. Hutsegite baten ondorioz jaso baduzu, bidal iezaiozu berriro
bidaltzaileari eta ezaba ezazu. Milesker zure laguntzagatik. Behar beharrezkoa baino ez inprimatu, gogoratu zure INGURUMENarekiko konpromisoa.
• La información de este correo puede ser confidencial y está protegida por la legislación vigente. Si ha recibido este correo por error, reenvíelo a su emisor y elimínelo. Gracias por su ayuda. Imprime sólo lo imprescindible, recuerda tu compromiso con el
MEDIO AMBIENTE.
• This e-mail may contain confidential information that is protected by our laws. If you have received this e-mail by mistake, please, notify the sender and delete it. Thank you for your help. Before printing think about the ENVIRONMENT.
|
|