Bug 1321337 - Please remove (orphan) geary from next Fedora version
Summary: Please remove (orphan) geary from next Fedora version
Keywords:
Status: CLOSED NOTABUG
Alias: None
Product: Fedora
Classification: Fedora
Component: geary
Version: 24
Hardware: Unspecified
OS: Unspecified
unspecified
unspecified
Target Milestone: ---
Assignee: Thomas Moschny
QA Contact: Fedora Extras Quality Assurance
URL:
Whiteboard:
Depends On:
Blocks:
TreeView+ depends on / blocked
 
Reported: 2016-03-25 15:58 UTC by Christian Stadelmann
Modified: 2016-03-25 18:40 UTC (History)
4 users (show)

Fixed In Version:
Doc Type: Bug Fix
Doc Text:
Clone Of:
Environment:
Last Closed: 2016-03-25 18:40:46 UTC
Type: Bug


Attachments (Terms of Use)

Description Christian Stadelmann 2016-03-25 15:58:06 UTC
Description of problem:
Geary is not maintained any more and upstream is mostly dead[1]. Yorba company/foundation is gone [2]. There are no more updates for geary, nobody will take care of security fixes. Security is quite important for an application mostly parsing content downloaded from (partially untrustworthy sources on) the internet. Unless downstream (i.e. @salimma and @thm) are willing to take the burden of full maintenance, this package should be orphaned.

To cite Michael Catanzaro [3]:
> It's dead upstream, and it's gonna be stuck on WebKit1 forever, so it's very insecure to the point where it should arguably be dropped from Fedora, and it's affected by WebKit crashes that will never be fixed, and there are no signs this will change. If someone starts maintaining Geary (including working on the WebKit2 port, possibly by rebasing Geary on Pantheon Mail) then we could consider it; otherwise, this is a blocker issue IMO.

Additional info:
I'm not sure whether this package can still be removed from Fedora 24. It should (if possible), maybe through a freeze exception.

[1] https://git.gnome.org/browse/geary/log/
[2] https://en.wikipedia.org/w/index.php?title=Talk:Yorba_Foundation&oldid=691130501#Does_Yorba_still_exist.3F
[3] https://lists.fedoraproject.org/archives/list/desktop@lists.fedoraproject.org/message/6KZC2KQM7S6WIAMT375PX3FRCYEOTCCF/

Comment 1 Raphael Groner 2016-03-25 18:02:45 UTC
I fail to see any death here. Last commit at upstream is 24 hours old.
https://git.gnome.org/browse/geary/log/

Comment 2 Thomas Moschny 2016-03-25 18:40:33 UTC
There is a difference between discussing whether Geary should be the default email client and totally retiring it from the distribution.

As there recently have been discussions about finding new maintainers (see for example this thread https://mail.gnome.org/archives/geary-list/2016-March/msg00002.html) and even someone volunteering, I see no reason for hastily retiring Geary from Fedora.


Note You need to log in before you can comment on or make changes to this bug.