FW: Moment.js is is a Legacy Project, are there plans to update it.

[Ortiz, Gabriel E. (GSFC-730.0)[BUSINESS INTEGRA, INC.]]

See below.

 

Thanks,

Gabe Ortiz
IT Systems Engineer

Mission Cloud Platform (MCP)

Information Technology and Communications Directorate (Code 730)

NASA Goddard Space Flight Center

agcy-mis...@mail.nasa.gov

Cell: 703.689.1536

 

From: Ortiz, Gabriel E. (GSFC-730.0)[BUSINESS INTEGRA, INC.]
Sent: Monday, January 10, 2022 12:47 PM
To: jenkins...@googlegroups.com
Subject: Moment.js is is a Legacy Project, are there plans to update it.

 

Moment.js is a legacy project now and was flagged by our security team.  Are there plans to migrate it, upgrade it or remove it?

https://momentjs.com/docs/#/-project-status/

It is a dependency for Pipeline: Stage View

 

Also how do I contact the maintainers of the plugin directly?

 

Thanks,

Gabe Ortiz
IT Systems Engineer

Mission Cloud Platform (MCP)

Information Technology and Communications Directorate (Code 730)

NASA Goddard Space Flight Center

agcy-mis...@mail.nasa.gov

Cell: 703.689.1536

 

[Jesse Glick]

Moment.js is a legacy project now and was flagged by our security team.  Are there plans to migrate it, upgrade it or remove it?

https://momentjs.com/docs/#/-project-status/

It is a dependency for Pipeline: Stage View

This plugin is not really maintained, so I would not expect anything much to change. If you do not need the plugin, uninstall it. If you suspect there is an exploitable security vulnerability, see https://www.jenkins.io/security/reporting/.

[Gavin Mogan]

This is the infra mailing list, which is about the infra that runs the
jenkins project.

The only plugin that requires it is pipeline stage view -
https://plugins.jenkins.io/momentjs/#dependencies You can create an
issue for pipeline stage view to update, or switch to
https://community.jenkins.io/t/blue-ocean-but-in-classic-ui/96

Either way, infra list probably isn't where you'd get great visibility.

Gavin

> --
> You received this message because you are subscribed to the Google Groups "Jenkins Infrastructure" group.
> To unsubscribe from this group and stop receiving emails from it, send an email to jenkins-infr...@googlegroups.com.
> To view this discussion on the web, visit https://groups.google.com/d/msgid/jenkins-infra/CANfRfr1%2BFrYgOi%3DYWN9U3_PGTOoK%3DSYcBj7%3DEyQBFWaud0%2BeLw%40mail.gmail.com.