This feels like it was a lesser of two evils type decision - pyscss was the previous Sass compiler which has not had any updates since 2022:
https://github.com/Kronuz/pyScss/commits/master/ libsass and libsass-python have more recent commits (mainly maintenance stuff): https://github.com/sass/libsass/commits/master/ https://github.com/sass/libsass-python/commits/main/ Given alternatives are not in archive and potential have much different security postures this feels like a modest improvement in terms of security risk exposure from the current status quo of pyscss. ** Changed in: libsass-python (Ubuntu) Status: Incomplete => New ** Changed in: libsass-python (Ubuntu) Assignee: James Page (james-page) => (unassigned) -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/2095581 Title: [MIR] libsass-python To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/libsass-python/+bug/2095581/+subscriptions -- ubuntu-bugs mailing list [email protected] https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
