[tractusx-dev] Starting Deprecation Process from TRG 7.09 for the Digita

[Mathias Brunkow Moser <mathias.moser@xxxxxxxxxxxx>]

Hi Developers,

As described in our process for repository deprecation TRG 7.09 (which is responsibility of every committer, me included):

https://eclipse-tractusx.github.io/docs/release/trg-7/trg-7-09

Today I am starting the depreciation process of the digital product pass repository in Eclipse Tractus-X, which will be concluded in **TWO WEEKS** time. And following the template for deprecation here is the information:

Following repositories are proposed to be subject to deprecation with the upcoming release following [TRG 7.09](/docs/release/trg-7/trg-7-09):

**Use Case Product** :

• https://github.com/eclipse-tractusx/digital-product-pass
• Committers: @muhammadsaud.khan and @Mathias Brunkow Moser(me)

**Call to Action**: Please discuss within your company e.g., with your Tractus-X/Catena-X responsible, whether you run into an issue. 

This repository bas already been not maintained for a while 9 months (not included in two releases) and not included in this release cycle (R25.09) without any update and with no clear committer to maintain the repository and fix all the security issues.

Because of this this reason it gets deprecated because of these two points:

- **Criterion 1**: The repository does not comply with the Eclipse Tractus-X Releases Guidelines (TRG's) and/or the guidelines set by the Eclipse Foundation (i.e. Security, Intellectual Property, etc.)

     - In this case security (unmaintained dependencies)

     

- **Criterion 2**: The product of the repository has not been released within the past year's major release cycle*.

The deprecation note was already written in the dpp repository (main readme), and also the dpp-tutorial and the dpp-verification were migrated to another repository:

• dpp-verification -> became the Data Trust & Security KIT (for more use cases than DPP): https://eclipse-tractusx.github.io/docs-kits/next/kits/data-trust-and-security-kit/adoption-view
• dpp-tutorial -> was migrated to tutorial resources  https://github.com/eclipse-tractusx/tutorial-resources/tree/main/dpp-tutorial

Feel free to comment in this issue if you are willing to maintain it (solve all the security issues, and make it fit for the next release):

https://github.com/eclipse-tractusx/.eclipsefdn/issues/135

PR: https://github.com/eclipse-tractusx/.eclipsefdn/pull/136

Otherwise, it will be deprecated but always can be restored as described in our TRG.

We are also offering a new alternative to the Digital Product Passport application that is the Industry Core Hub, which can support any use case data model which is based on the Industry Core KIT:

https://github.com/eclipse-tractusx/industry-core-hub

Tomorow I will present this topic in the Office Hour accordingly to our process,

Have a nice day,

Kind Regards,

Mathias Moser

Chief Software Architect

Eclipse Tractus-X™ Project Lead 

 

Catena-X Automotive Network e.V. 
Reinhardtstr. 58 • 10117 Berlin 
Tel: +49 151 26515225 

mathias.moser@xxxxxxxxxxxx | LinkedIn

 

 

Follow us at LinkedIn

 

Vereinsregister beim Amtsgericht Berlin (Charlottenburg) Nr VR38942B

Vorstandsvorsitzender: Oliver Ganser 

 

Book time to meet with me

    

 

CONFIDENTIALITY NOTICE: Proprietary/Confidential Information belonging to Catena-X Automotive Network e.V. and its associates may be contained in this message. If you are not a recipient indicated or intended in this message (or responsible for delivery of this message to such person), or you think for any reason that this message may have been addressed to you in error, you may not use or copy or deliver this message to anyone else. In such case, you should destroy this message and are asked to notify the sender by reply e-mail.