Update cassandra-storage extension to use the Datastax java driver instead of Astyanax
Open
Area - Dependencies
Area - Extension
Security
- Dominant language
- Java
- Stars
- 14.1k
- Forks
- 3.8k
- Avg merge
- 2d 58m
- Merged PRs (30d)
- 233
Description
The cassandra-storage extension uses Astyanax, which has been retired and is no longer under active development. The latest version of Astyanax uses an old version of libthrift (0.6.1), which has a few high severity CVEs.
The Astyanax project suggests using the Datastax java driver instead. Once Astyanax has been replaced, its CVE suppressions can also be removed.
Contributor guide
Research direction
Locate the cassandra-storage extension and its Astyanax integration first; review how the Datastax Java driver should replace it and identify the CVE suppressions tied to Astyanax. Done means the extension no longer uses Astyanax, uses the Datastax driver, and those suppressions are removed.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- cassandra, java
- Domain
- database
- Issue type
- Refactor
- Difficulty
- 4/5
- Estimated time
- 3-5 days
- Activity status
- Stale
- Clarity
- Mostly clear
- Newbie friendliness
- 35/100