Re: Status of texinfo/js/yarn.lock ?

[Gavin Smith]

On Sun, Nov 13, 2022 at 10:22:23AM +0100, Hilmar Preuße wrote:
> Hi,
> 
> hopefully this is not a FAQ, but I found nothing in the archive.
> 
> What is the status of the code sitting in subdir "js"? To me this code
> looks quite unmaintained. I'm just asking, b/c the dependabot [1]
> reports a lot of vulnerabilities in js/yarn.lock.

> [1] https://github.com/debian-tex/texinfo/security/dependabot

That page reports a 404.

> I'm aware that the are
> mostly sitting in external referenced modules.

Does that mean that those modules need to be fixed (not our problem),
or that our module references need to be updated somehow?

> Could you clarify, what the strategy for this piece of code is? Many thanks!

It is used for the -c INFO_JS_DIR option to texi2any.  It has not received
much recent development.  There is no plan for any further development
to this code, and such would rely on people coming forth to report problems
or suggest improvements.

It is used for the web documentation of at least one project, DomTerm
(http://domterm.org/index.html).