Archived Library. Not maintained

Location

https://gitlab.eclipse.org/eclipse-research-labs/codeco-project/scheduling-and-workload-migration-swm/qos-scheduler/-/blob/main/scheduler/go.sum

Restricted Dependencies

Please mark restricted dependencies as they are handled.

• go/golang/github.com%2Fjung-kurt/gofpdf/v1.0.3-0.20190309125859-24315acbbda5

Restricted Dependency	Comments	Suggestions
go/golang/github.com%2Fjung-kurt/gofpdf/v1.0.3-0.20190309125859-24315acbbda5	This library is archived (https://github.com/jung-kurt/gofpdf). Not Maintained since NOV 2021.	Use an alternative library

added IP Review label

assigned to @jkgesswein

cc @asgomes @mjahn0qp

changed the description

Hi @jkgesswein , Have you been able to look at this issue? Thanks!

marked the checklist item go/golang/github.com%2Fjung-kurt/gofpdf/v1.0.3-0.20190309125859-24315acbbda5 as completed

marked the checklist item go/golang/github.com%2Fjung-kurt/gofpdf/v1.0.3-0.20190309125859-24315acbbda5 as incomplete

Hi @davidremon , this seems to be an indirect dependency. We are not using the library directly, so cannot replace it. It is probably imported by a network library (that is not under our control). So your proposed action is not feasible. Also, we do not think we are using the functionality, not even indirectly, because we are not generating PDFs (which is the library's purpose). From our perspective, it is uncritical that the library is archived and no longer maintained.

Thanks @mueller9001 for your answer.

@asgomes @pkriefrvi we could close this issue. What do you think?

OK with me. Just on a side note, it's always recommended to perform a periodic cleanup of the dependencies file.

closed

marked the checklist item go/golang/github.com%2Fjung-kurt/gofpdf/v1.0.3-0.20190309125859-24315acbbda5 as completed