Bug 1321337

Summary:	Please remove (orphan) geary from next Fedora version
Product:	[Fedora] Fedora	Reporter:	Christian Stadelmann <fedora>
Component:	geary	Assignee:	Thomas Moschny <thomas.moschny>
Status:	CLOSED NOTABUG	QA Contact:	Fedora Extras Quality Assurance <extras-qa>
Severity:	unspecified	Docs Contact:
Priority:	unspecified
Version:	24	CC:	justin.brown, michel, projects.rg, thomas.moschny
Target Milestone:	---
Target Release:	---
Hardware:	Unspecified
OS:	Unspecified
Whiteboard:
Fixed In Version:		Doc Type:	Bug Fix
Doc Text:		Story Points:	---
Clone Of:		Environment:
Last Closed:	2016-03-25 18:40:46 UTC	Type:	Bug
Regression:	---	Mount Type:	---
Documentation:	---	CRM:
Verified Versions:		Category:	---
oVirt Team:	---	RHEL 7.3 requirements from Atomic Host:
Cloudforms Team:	---	Target Upstream Version:

Description Christian Stadelmann 2016-03-25 15:58:06 UTC

Description of problem:
Geary is not maintained any more and upstream is mostly dead[1]. Yorba company/foundation is gone [2]. There are no more updates for geary, nobody will take care of security fixes. Security is quite important for an application mostly parsing content downloaded from (partially untrustworthy sources on) the internet. Unless downstream (i.e. @salimma and @thm) are willing to take the burden of full maintenance, this package should be orphaned.

To cite Michael Catanzaro [3]:
> It's dead upstream, and it's gonna be stuck on WebKit1 forever, so it's very insecure to the point where it should arguably be dropped from Fedora, and it's affected by WebKit crashes that will never be fixed, and there are no signs this will change. If someone starts maintaining Geary (including working on the WebKit2 port, possibly by rebasing Geary on Pantheon Mail) then we could consider it; otherwise, this is a blocker issue IMO.

Additional info:
I'm not sure whether this package can still be removed from Fedora 24. It should (if possible), maybe through a freeze exception.

[1] https://git.gnome.org/browse/geary/log/
[2] https://en.wikipedia.org/w/index.php?title=Talk:Yorba_Foundation&oldid=691130501#Does_Yorba_still_exist.3F
[3] https://lists.fedoraproject.org/archives/list/desktop@lists.fedoraproject.org/message/6KZC2KQM7S6WIAMT375PX3FRCYEOTCCF/

Comment 1 Raphael Groner 2016-03-25 18:02:45 UTC

I fail to see any death here. Last commit at upstream is 24 hours old.
https://git.gnome.org/browse/geary/log/

Comment 2 Thomas Moschny 2016-03-25 18:40:33 UTC

There is a difference between discussing whether Geary should be the default email client and totally retiring it from the distribution.

As there recently have been discussions about finding new maintainers (see for example this thread https://mail.gnome.org/archives/geary-list/2016-March/msg00002.html) and even someone volunteering, I see no reason for hastily retiring Geary from Fedora.