Opened 6 hours ago

Last modified 5 hours ago

#71310 new defect

Stop using xercesc3

Reported by: ryandesign (Ryan Carsten Schmidt) Owned by:
Priority: Normal Milestone:
Component: ports Version:
Keywords: Cc: arjen@…, mbrethen, mojca (Mojca Miklavec), nilason (Nicklas Larsson), ryandesign (Ryan Carsten Schmidt), nerdling (Jeremy Lavergne), scantor (Scott Cantor), support@…, tenomoto (Takeshi Enomoto), remkos (Remko Scharroo), paumard, lockhart (Thomas Lockhart), Veence (Vincent), barracuda156
Port: freecad cegui libmemcached wt sigil-qt4 enigma gdal pcraster pdal h3dapi opensaml Gyoto aircraft_oap esmf geant4 nco sumo shibboleth xml-security-c xmltooling blahtexml xalanc xercesc3 xqilla zorba

Description

The developer of xercesc3 gives notice that it should not be used anymore:

I'd strongly advise pulling or at least deprecating (don't know the official process) all the Macports relying on Xerces, they're all at risk using this code or Xalan. I am the last maintainer left, I don't support the Mac for my own software anymore, and once I'm fully off Xerces in a few years, I seriously doubt it has a future unless somethiing changes.

Whatever the official process is for retiring ports, I would be getting the crank turning on that.

Please try to remove the xercesc3 dependency from your ports. If it is a mandatory dependency, please work with the upstream developers to get it removed from their code.

Change History (5)

comment:1 Changed 6 hours ago by scantor (Scott Cantor)

Notably regarding a few of mine:

  • xml-security-c is officially retired as an Apache code base. It was forked for private use by the Shibboleth Project
  • All the Shibboleth Project ports (xmltooling, opensaml, shibboleth) are in their wind-down phase and will be replaced and go out of support by late this decade

None of that code is really supported for the Mac now, as of a few years back, that's why I haven't been maintaining those ports very actively.

I will open a similar ticket to this one against all those ports now that I know that's appropriate to do.

comment:2 Changed 6 hours ago by ryandesign (Ryan Carsten Schmidt)

Yes please! We don't want MacPorts to be a museum, but we also don't want to just remove a port that others still depend on, so it can take some work before an old library can be removed.

comment:3 Changed 6 hours ago by ryandesign (Ryan Carsten Schmidt)

In c6a4e33d8cf123cef4b0343082303ac3a72f5b66/macports-ports (master):

xercesc3: deprecated

See: #71310

comment:4 Changed 5 hours ago by ryandesign (Ryan Carsten Schmidt)

Port: freecad cegui cegui libmemcached wt sigil-qt4 enigma gdal pcraster pdal h3dapi opensaml Gyoto aircraft_oap esmf geant4 nco sumo shibboleth xml-security-c xmltooling blahtexml xalanc xercesc3 xqilla zorbafreecad cegui libmemcached wt sigil-qt4 enigma gdal pcraster pdal h3dapi opensaml Gyoto aircraft_oap esmf geant4 nco sumo shibboleth xml-security-c xmltooling blahtexml xalanc xercesc3 xqilla zorba

comment:5 Changed 5 hours ago by paumard

Gyoto can be built without xerces-c but with a severe cost on functionality: https://github.com/gyoto/Gyoto/issues/25

Note: See TracTickets for help on using tickets.