Skip to main content
[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index] [List Home]
[sw360-dev] Proposal archive the sw360bdpImportService
  • From: "Kristan Johannes (IOC/PAP-ESC-OS)" <johannes.kristan@xxxxxxxx>
  • Date: Fri, 10 Dec 2021 12:32:48 +0000
  • Accept-language: de-DE, en-US
  • Arc-authentication-results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=bosch.io; dmarc=pass action=none header.from=bosch.io; dkim=pass header.d=bosch.io; arc=none
  • Arc-message-signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1; bh=Nh6ozSEo1Xz3Ve3/g/Wt2NgIUSQ+NOMZa3dxDdgmCQY=; b=cVde/LwFnp/Edwdduuj3C3/UBnTSr49ReWzLScmRCbxG9uj0LJA752SXb7OSLXRqXkrwCNG3arDVg00oVZb6eEU56WD5YrjbrboSw9Z1YfiIPI4AF7WMhDyHNPOTGhBD49sFlLFq2owaOc2MMwHbKx6zL3r+SmlRU9/Dkm6QpwEz1NJnSjP/aAMnPBNmXk8velWuK94a6SLctYIyn2ksfyg/+c1LVixjz6L88KBEJQsae/CH4wOKKAP0WKne5chk1Pp8BhAuJoU+/2SbSHmLQR1/Z5mEL5eP9m8NMBNYYV/F6p8zJhQSD0AZff0IyKF9zbdfHdiia0lVkoYJEGARkg==
  • Arc-seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=DJcbUbsp9Qv2wUBIddmjrgFqO7CFvILonVYqUf4GruR3azFDuIhYuGRudc4fa+qtTn5sU3eLNvGOJZ6BelJnRb/mbI1mx0JY6hdzvj8V7elE/9Lp2vc/DEWSqm9sNPhtZkLEXPk7lF97TwmK9CXbXBEf8C98MeLWxBCYTiM793D4CSyEXwQzdWvdGWCNVPi2Sqc4Ezmv2qnDgvD1Q3ZHY4v9tLQDC2Q+gcY2+tJEE3Sny77xl9MKBGHMCizKdNHpULeiMrBN7nWPmml3PMflaTxGb3dvGj4bQR9S2bINyEBxFefAFcYd0GRJ+Oa57vpmnQj1TrKER3jwXRGOFvzPsw==
  • Delivered-to: sw360-dev@xxxxxxxxxxx
  • List-archive: <https://www.eclipse.org/mailman/private/sw360-dev/>
  • List-help: <mailto:sw360-dev-request@eclipse.org?subject=help>
  • List-subscribe: <https://www.eclipse.org/mailman/listinfo/sw360-dev>, <mailto:sw360-dev-request@eclipse.org?subject=subscribe>
  • List-unsubscribe: <https://www.eclipse.org/mailman/options/sw360-dev>, <mailto:sw360-dev-request@eclipse.org?subject=unsubscribe>
  • Thread-index: AQHX7cIKy/kooylPgUujHpEjscNptw==
  • Thread-topic: Proposal archive the sw360bdpImportService
  • User-agent: Microsoft-MacOutlook/16.52.21080801

Hi SW360 community,

 

I just stumbled upon some CVEs, which affect libraries we are using in the sw360bdpImportService [1]. At a first glance none of the described vulnerabilities could directly be exploited in our code. However, I would like to take this as an opportunity to start a discussion about the future of this service. When we initially implemented this service Protex was widely used in the industry for snippet scanning, code auditing and BOM creation. As the product is phased out I assume its use is diminished as well.

 

Hence, I would like to know from the community whether this service is still in use. So It would be great if anyone who is still using this service could respond here so we can check how to further proceed. If there is no interest anymore in the community I would propose to deprecate the sw360bdpImportService and archive its repository. Would be great if you can react until end of next week so we can act before the seasonal break.

 

WDYT?

 

Kind regards,

Johannes

 

[1] https://github.com/sw360/sw360bdpImportService

Back to the top