On Tue, Aug 28, 2018 at 8:49 AM Vít Ondruch <vondruch@redhat.com> wrote:

So this is the email announcing orphaning js-jquery1:

https://lists.fedoraproject.org/archives/list/devel@lists.fedoraproject.org/message/MI7W7TT3MUGMQTLYZYE5FKXUJCKFUXU7/

But apparently it is used by more packages then just a few. So is there
somebody, who would be willing (more than me) to keep the package alive?

V.

Given the security vulnerabilities in jQuery 1 (and 2) and the fact that upstream dropped them a long time ago, I strongly recommend the packages be retired than kept alive. Packagers depend on the newer js-jquery (3) instead, patching as needed.

I plan on migrating accumulo to use the newer js-jquery soon, but I need the maintainer of nodejs-flot to do so first. (https://bugzilla.redhat.com/show_bug.cgi?id=1623115)