epub-utils: xmldom-alpha is no longer maintained

[karfau]

Hello, I just wanted to let you know that the package xmldom (which is from the same code base as xmldom-alpha this is being used in package.json) was not maintained for a while and that's why a new github organization took over maintainance under https://github.com/xmldom/xmldom .

While the new organization is publishing new versions to the xmldom package, there are no plans of maintaining the separate xmldom-alpha package.

The version you are using also contains a bug/regression that has been fixed and will soon be published as part of the v0.4.0 of the xmldom package.

I'm informing you about this, since this package is one of the last remaining dependents of xmldom-alpha.

[danielweck]

Thank you for taking the time to let us know.

You will be pleased to hear that we migrated away from xmldom-alpha several months ago, although the change was introduced in a Git branch dedicated to the "next" version of Ace, which is still tagged as "beta" on NPM (even though it is already deployed in the Ace App GUI).

master branch:

ace/packages/epub-utils/package.json

Line 25 in 87947c9

"xmldom-alpha": "^0.1.28",

=> version 1.1.1, NPM tag "latest":

https://www.npmjs.com/package/@daisy/ace/v/latest

ace-next branch:

ace/packages/epub-utils/package.json

Line 27 in a6fbed4

"xmldom": "^0.3.0",

=> version 1.2.0-beta.12, NPM tag "next":

https://www.npmjs.com/package/@daisy/ace/v/next

master branch of Ace App:

https://github.com/daisy/ace-gui/blob/269cc559898b5c6695dc98f80612644d39bd36b9/package.json#L182

[karfau]

Glad to hear that.
I would be fine to close this issue, but maybe you want to keep it open for transparency, so I'm leaving it as it is.

[karfau]

Just to let you know that all versions of xmldom-alpha (and xmldom < 0.5.0) suffer from the security issue fixed in [email protected].

We are not able to deprecate the xmldom-alpha package. Just wanted to let you know in case you want to either release an update for the old version or deprecate those old versions.

[danielweck]

Closing now, as fixed in Ace "next" #314