Fwd: EOL in sigs.k8s.io/yaml

[Satish Suradkar]

Hi,

can you please help with the following issue?

Thanks and Regards,

Satish

---------- Forwarded message ---------
From: Satish Suradkar <suradkar...@gmail.com>
Date: Tue, Jan 17, 2023 at 12:43 PM
Subject: EOL in sigs.k8s.io/yaml
To: <secu...@kubernetes.io>

Hi,

$ go mod why -m github.com/davecgh/go-spew

# github.com/davecgh/go-spew

sigs.k8s.io/yaml

sigs.k8s.io/yaml.test

github.com/davecgh/go-spew/spew

BlackDuck Scan report - PFA

It uses EOL go-spew.  Any plan to update it?

[Justin Santa Barbara]

I wasn't able to find any documentation that this library is actually EOL - do you have a source for that?

Nonetheless, proposed https://github.com/kubernetes-sigs/yaml/pull/87 ... trimming this dependency looks straightforward.