Since this is a required dependency of spring-cloud-commons.

As suggested in <a class="issue-link js-issue-link" data-error-text="Failed to load ti

Related comment: <a class="commit-link" href="https://github.com/dsyer/spring-security

Move to spring related org/project about spring-security-rsa HOT 5 OPEN

dsyer commented on July 20, 2024 2

Move to spring related org/project

from spring-security-rsa.

Comments (5)

spencergibb commented on July 20, 2024 1

https://github.com/spring-projects-experimental would be a good landing place (spring-cloud-cli depends on spring-boot-thin-launcher which is in that org).

from spring-security-rsa.

robert-gdv commented on July 20, 2024

As suggested in #26 (comment) I would like to move the discussion about maintenance to this issue.

Security wise I think it is risky, that spring relies on this project to maintain its dependency to bouncycastle. A security relevant bugfix in bouncycastle requires an update of this project at first, then an update of spring.

In most of the cases, there is no code to modify. But since this project is apparently maintained by a single person and that person is just a mortal human, it happens that updates are also delayed.

from spring-security-rsa.

robert-gdv commented on July 20, 2024

Related comment: fac6da4#commitcomment-120051343

from spring-security-rsa.

Recommend Projects