Opened 7 days ago

Last modified 2 days ago

#71310 new defect

Stop using xercesc3

Reported by: ryandesign (Ryan Carsten Schmidt) Owned by:
Priority: Normal Milestone:
Component: ports Version:
Keywords: Cc: arjen@…, mbrethen, mojca (Mojca Miklavec), nilason (Nicklas Larsson), ryandesign (Ryan Carsten Schmidt), nerdling (Jeremy Lavergne), scantor (Scott Cantor), support@…, tenomoto (Takeshi Enomoto), remkos (Remko Scharroo), paumard, lockhart (Thomas Lockhart), Veence (Vincent), barracuda156, Dave-Allured (Dave Allured)
Port: freecad cegui libmemcached wt sigil-qt4 enigma gdal pcraster pdal h3dapi opensaml Gyoto aircraft_oap esmf geant4 nco sumo shibboleth xml-security-c xmltooling blahtexml xalanc xercesc3 xqilla zorba

Description

The developer of xercesc3 gives notice that it should not be used anymore:

I'd strongly advise pulling or at least deprecating (don't know the official process) all the Macports relying on Xerces, they're all at risk using this code or Xalan. I am the last maintainer left, I don't support the Mac for my own software anymore, and once I'm fully off Xerces in a few years, I seriously doubt it has a future unless somethiing changes.

Whatever the official process is for retiring ports, I would be getting the crank turning on that.

Please try to remove the xercesc3 dependency from your ports. If it is a mandatory dependency, please work with the upstream developers to get it removed from their code.

Change History (9)

comment:1 Changed 7 days ago by scantor (Scott Cantor)

Notably regarding a few of mine:

  • xml-security-c is officially retired as an Apache code base. It was forked for private use by the Shibboleth Project
  • All the Shibboleth Project ports (xmltooling, opensaml, shibboleth) are in their wind-down phase and will be replaced and go out of support by late this decade

None of that code is really supported for the Mac now, as of a few years back, that's why I haven't been maintaining those ports very actively.

I will open a similar ticket to this one against all those ports now that I know that's appropriate to do.

comment:2 Changed 7 days ago by ryandesign (Ryan Carsten Schmidt)

Yes please! We don't want MacPorts to be a museum, but we also don't want to just remove a port that others still depend on, so it can take some work before an old library can be removed.

comment:3 Changed 7 days ago by ryandesign (Ryan Carsten Schmidt)

In c6a4e33d8cf123cef4b0343082303ac3a72f5b66/macports-ports (master):

xercesc3: deprecated

See: #71310

comment:4 Changed 7 days ago by ryandesign (Ryan Carsten Schmidt)

Port: freecad cegui cegui libmemcached wt sigil-qt4 enigma gdal pcraster pdal h3dapi opensaml Gyoto aircraft_oap esmf geant4 nco sumo shibboleth xml-security-c xmltooling blahtexml xalanc xercesc3 xqilla zorbafreecad cegui libmemcached wt sigil-qt4 enigma gdal pcraster pdal h3dapi opensaml Gyoto aircraft_oap esmf geant4 nco sumo shibboleth xml-security-c xmltooling blahtexml xalanc xercesc3 xqilla zorba

comment:5 Changed 7 days ago by paumard

Gyoto can be built without xerces-c but with a severe cost on functionality: https://github.com/gyoto/Gyoto/issues/25

comment:6 Changed 7 days ago by ryandesign (Ryan Carsten Schmidt)

In e30d6c1b19b62c86038215b74c0bd47ce116ef4e/macports-ports (master):

cegui: Stop using xercesc3

See: #71310

comment:7 Changed 5 days ago by ryandesign (Ryan Carsten Schmidt)

In e57c4970a6cfae882dd871501343092916cb7ebf/macports-ports (master):

zorba: Stop using xercesc3

See: #71310

comment:8 Changed 2 days ago by Dave-Allured (Dave Allured)

Cc: Dave-Allured added

comment:9 Changed 2 days ago by remkos (Remko Scharroo)

I submitted a PR (https://github.com/macports/macports-ports/pull/26678) to remove xercesc3 from the nco port.

Note: See TracTickets for help on using tickets.