clj-commons

lread 2023-01-13T05:02:21.392239Z

I'm noticing https://github.com/clj-commons/pomegranate is on the stale side. Is this lib still used by folks today? @slipset please feel free to add me as a maintainer and I can help keep it maintained.

seancorfield 2023-01-13T18:46:19.154139Z

I think it's just one of those things that is "done" -- is the staleness just its deps?

seancorfield 2023-01-13T18:48:19.856519Z

(Leiningen still uses it: https://codeberg.org/leiningen/leiningen/src/branch/main/leiningen-core/project.clj#L12 and I think I've seen it referenced in a few other projects, but it is definitely used less than it used to be)

slipset 2023-01-13T18:50:19.910039Z

Stale deps with CVEs on it.

seancorfield 2023-01-13T18:56:18.942639Z

Ah, worth bumping and cutting a new release then. Maybe then let the lein folks know via an issue since they're working on 2.10.1 of Leiningen right now.

slipset 2023-01-13T18:57:12.537829Z

2.10.1?

slipset 2023-01-13T18:57:53.868119Z

Away from computer but I thought we were around 2.90 or something?

seancorfield 2023-01-13T18:58:15.536349Z

Latest commit on Leiningen: https://codeberg.org/leiningen/leiningen/commit/acb7833eb4dc57ada7b789fe18b3273951fc5b0f "Bump version to 2.10.1-SNAPSHOT"

slipset 2023-01-13T19:02:54.360159Z

Probs using 2.9 something then :)

lread 2023-01-13T19:14:36.114819Z

There's also no release automation and other maintenancy type things.

lread 2023-01-13T19:17:27.546029Z

@seancorfield I was looking at my options at properly determining deps for libs for cljdoc, hence peek at pomegranate. I'm guessing it is a potentially viable choice today. (tools.deps almost did the trick but it filters out provided deps which cljdoc is interested in seeing).

👍🏻 1