Thoughts on ESAPI switching from Google Groups to GitHub Discussions

[Kevin W. Wall]

I am thinking of using GitHub Discussions for our ESAPI/esapi-java-legacy repo, or at least enabling it long enough to see how it might work out

Is this something that the ESAPI Community might find useful? I'm not convinced that it won't be a magnet for spam, but OTOH, the community activity over here on these Google group mailing lists is next to zero traffic aside from the occasional announcements that the ESAPI team makes.

I think it may be easier for the community to use, just like many have found that it was easier to ask questions via our GitHub issues (which we've had to put a stop to because of the overhead of closing them once the discussion was over and trying to exclude it from our release notes). So maybe this would make it easy to ask questions again, especially with everything being in the same place.

Does anyone know of any repos where GitHub Discussions have been used successfully or have some other reason(s) why they think we should try them? If so, I'd like to hear about those success stories. If you do not wish to share your thoughts with the group, please at least reply to Matt, Jeremiah, and myself.

Thanks,

-kevin

--

Blog: https://off-the-wall-security.blogspot.com/    | Twitter: @KevinWWall | OWASP ESAPI Project co-lead
NSA: All your crypto bit are belong to us.

[Kevin W. Wall]

FWIW, I did finally recall one GitHub repo (Simone Curzi's Threat Manager Studio) that is using the GitHub Discussions board.

Thought I'd reference it in case anyone else wanted to see what it looked like:

https://github.com/simonec73/threatsmanager/discussions

-kevin

[Matt Seil]

I really like it. 

It's also one less thing to manage in my mailbox so I'm all for that too.  

Looks like you can also promote discussions into issues too.  So it can start as a question and morph into work items. 

+1

[Kevin W. Wall]

I set up a temporary public repo at https://github.com/ESAPI/test-github-discussions that has GitHub Discussions enabled as a playground if anyone wants to experiment with it. (A tip of the cap to Simone Curzi for suggesting that.)

Create a few fake issues / discussions to play with it and let me know your feedback.

-kevin