On 3/20/2011 7:43 PM, Dan Poirier wrote: > On Sun. 2011-03-20 at 07:47 PM EDT, "William A. Rowe Jr." > <wr...@rowe-clan.net> wrote: >> >> [1] Note particularly that expat appears to be abandoned, no releases >> in almost 4 yrs, with a significant security issue hanging over it we >> patched in apr. No effort appears to be expended in providing any >> alternate non-expat apr_xml interfaces. > > For APR to continue bundling expat seems easiest, in the absence of > anyone motivated to do something more.
I wish we had a better understanding of where expat is headed, or if it is truly abandoned. It seems strange to rely on an orphaned dependency. Anyone have any inside knowledge or informed opinion?
