Skip to main content
[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index] [List Home]
Re: [kanto-dev] Is Eclipse Kanto still actively maintained?
  • From: Carlton Bale <carlton.bale@xxxxxxxxxxx>
  • Date: Tue, 16 Jun 2026 18:04:52 +0000
  • Accept-language: en-US
  • Arc-authentication-results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=cummins.com; dmarc=pass action=none header.from=cummins.com; dkim=pass header.d=cummins.com; arc=none
  • Arc-message-signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector10001; h=From:Date:Subject:Message-ID:MIME-Version; bh=38kDtMIudUegd/Aog93UH1cxgTZPsXYEEXYsMqeZ1vM=; b=IxWIeFEJrbhk8nSmREDihNXA2QrSrZ4nAO8Pw6qQjf5EdyqEOs1Ug/KIszeCI9ny75ngHKwCl6QuyT1PLluglR31voNgmc8GnuqwE4TutHLzgDeh5IECl/yK5zxFc+ucP8PRMNYHn83VBvURfruIgWWFUAZJbE2hG3buNJYvd99YHagnTbJgjZT9G/f3///8uUU2p9vM5YM1SUtrMiXQuRNu3l7dWtBVOjseSFlaaaf4u3R9mEgEmcSKlF4EjwBTXbLkZxWnbSpS/jwSnHSszBH3tLLf7HO9HCvxYu25Xdwzwl94ZJ+MVGbKMBLMg71dvWxejH+Bf5aRyz99fGin1g==
  • Arc-seal: i=1; a=rsa-sha256; s=arcselector10001; d=microsoft.com; cv=none; b=vaMtfDq+C3HBRKfvpA1ZjhJupLSZjQq9AIgFthC6AHR+XD8Npzek1w6phqr4l29LbH2KfiabWQILmwBkEWHXgfg/5T7rMTfDGK0MH308Y8PjEeijMRC8olt8EMjQBYTFr75wxclxbkSTPj6d93EFs+iASD1hHri61SLt8C0hxYbtDdaz0IpIzeb9XPx9M5OT6czmml2PAJCS0weXkKZGDerVznzOvvTCFIrZHZicT8w678oWnWPwX5L23CfvChwip+T4v5IcBY6BBBgJ7elDD2y82nJ/Ln9LICRMpZ8lhImYf0rTa2B2qfrwwdDTWKcTM48qhaSFxS/x4kH0bBBDyg==
  • Delivered-to: kanto-dev@xxxxxxxxxxx
  • List-archive: <https://www.eclipse.org/mailman/private/kanto-dev/>
  • List-help: <mailto:kanto-dev-request@eclipse.org?subject=help>
  • List-subscribe: <https://www.eclipse.org/mailman/listinfo/kanto-dev>, <mailto:kanto-dev-request@eclipse.org?subject=subscribe>
  • List-unsubscribe: <https://www.eclipse.org/mailman/options/kanto-dev>, <mailto:kanto-dev-request@eclipse.org?subject=unsubscribe>
  • Thread-index: AQHc/JhdR2dlN9FMvUGhDE7oDIduuLZBezWA
  • Thread-topic: Is Eclipse Kanto still actively maintained?
  • X_proofpointscan: true
The lead developers, who worked at Bosch, retired from the project. No one has taken over from them to my knowledge. Because it is written in Go, it seems to be more appropriate for IoT than SDV, at least on the client side. For automotive SDV, many companies have shifted focus to Symphony and Ankaios instead.

If you would like to take over the Kanto project, that would be fantastic. It would be great to see it picked up and carried forward.




From: kanto-dev <kanto-dev-bounces@xxxxxxxxxxx> on behalf of Perez Samuel via kanto-dev <kanto-dev@xxxxxxxxxxx>
Date: Monday, June 15, 2026 at 3:38 AM
To: kanto-dev@xxxxxxxxxxx <kanto-dev@xxxxxxxxxxx>
Cc: Perez Samuel <sperez@xxxxxxxxxx>; Valdes Ivan <ivaldes@xxxxxxxxxx>
Subject: [kanto-dev] Is Eclipse Kanto still actively maintained?

EXTERNAL SENDER: This email originated outside of Cummins. Do not click links or open attachments unless you verify the sender and know the content is safe.

Hi maintainers,
We are evaluating Eclipse Kanto as the edge runtime for a production IoT deployment (on-premise, container management + OTA + digital twins). We've been working with the v1.0.0 release and it fits our requirements well.
However, we've noticed that:
  • The last release across all components (suite-connector, container-management, file-upload, local-digital-twins, update-manager) was v1.0.0 on June 10, 2024 — over two years ago.
  • Several open issues have had no responses from maintainers.
  • Dependencies in the go.mod files are pinned to versions with known CVEs (e.g., runc v1.1.12 has CVE-2024-21626, containerd v1.6.28 is EOL, paho.mqtt.golang v1.4.1 has CVE-2025-10543).
  • The Go runtime version specified (go 1.17–1.19) is itself out of support.
Our questions:
  1. Is Eclipse Kanto still under active development? Are there plans for future releases?
  2. Is there a roadmap for dependency updates? Specifically bumping containerd, runc, and golang.org/x/* to patch known vulnerabilities.
We'd like to understand the project's status before committing to it for a production deployment. If the project is in maintenance-only or archived status, we'd appreciate transparency so we can plan accordingly.
Thank you for your time.


Samuel Perez Fernandez
| Adimen Konektatu eta hedatua
| Inteligencia Conectada y Distribuida
| Distributed and Connected Intelligence
 
sperez@xxxxxxxxxx
Tel.: +34 943 71 24 00
Pº J. M. Arizmendiarrieta, 2 - 20500 Arrasate-Mondragón (Gipuzkoa)
www.ikerlan.es
   
Logo
• Mezu honen informazioa isilpekoa izan daiteke eta indarrean dagoen legediak babesten du. Hutsegite baten ondorioz jaso baduzu, bidal iezaiozu berriro bidaltzaileari eta ezaba ezazu. Milesker zure laguntzagatik. Behar beharrezkoa baino ez inprimatu, gogoratu zure INGURUMENarekiko konpromisoa.
• La información de este correo puede ser confidencial y está protegida por la legislación vigente. Si ha recibido este correo por error, reenvíelo a su emisor y elimínelo. Gracias por su ayuda. Imprime sólo lo imprescindible, recuerda tu compromiso con el MEDIO AMBIENTE.
• This e-mail may contain confidential information that is protected by our laws. If you have received this e-mail by mistake, please, notify the sender and delete it. Thank you for your help. Before printing think about the ENVIRONMENT.

Back to the top