googleapis / googleapis/google-api-java-client
EOL Status of OpenCensus Jars and Request for Migration
- 主要语言
- Java
- 星标
- 1.5k
- 派生
- 772
- 平均合并
- 1 小时 44 分钟
- 30 天内合并 PR
- 1
描述
As part of our ongoing security initiatives, our team is conducting regular checks on all third-party dependency jars bundled within our product. Our objective is to ensure that we are using the most up-to-date libraries and to avoid including any components that have reached **end-of-life (EOL) status**.
During a recent review, we observed that some of the Android Enterprise dependencies we use **_opencensus-api_** and **_opencensus-contrib-http-util_** jars are outdated.
Dependancies for these jars : google-http-client.jar
Based on the release history of opencensus-api, it appears the library has not been updated in the **past three years since Apr 29, 2022 (version 0.31.1)**
[https://mvnrepository.com/artifact/io.opencensus/opencensus-api](https://mvnrepository.com/artifact/io.opencensus/opencensus-api)
[https://mvnrepository.com/artifact/io.opencensus/opencensus-contrib-http-util](https://mvnrepository.com/artifact/io.opencensus/opencensus-contrib-http-util)
Given the implications this has on our security posture, we would like to understand if there are any plans to:
Upgrade Google google-http-client.jar independent of this jar?
We would greatly appreciate any guidance or timeline you can provide regarding this.
贡献指南
评估
这个 Issue 还没有评估数据。