gomail library unmaintained

[fnetX]

The gomail library used by Gitea is out of date. Transfer from me from the channel (Matrix)

Gitea seems to use https://github.com/go-gomail/gomail which is unmaintained since 2016, and the "actively maintained" fork appears unmaintained, too: https://github.com/go-mail/mail/
Do you consider this an issue for you? I looked at some Gitea issues, and some cases like different timeouts / retries is also a feature request to both frameworks, but apparently never implemented. Does a switch make sense, or is the current state perfectly fine?

---

Discussion already started here:

FYI

• This seems to be unmaintained, here is an alternative go-gomail/gomail#163
• Its has been 4 years, no activity. Is it still reliable (number of starts vs 4 years no activity) go-gomail/gomail#150

Maybe we should maintain gomail by ourselves, or switch to another one. Then we may not need hacky code.

Some active forks:

• https://github.com/Shopify/gomail (Shopify is a big company)
• https://github.com/DeedleFake/gomail (new)

Originally posted by @wxiaoguang in #18075 (comment)

[wxiaoguang]

FYI, there were more comments.

1. These active forks seem not ideal. Add option to convert CRLF to LF line endings for sendmail #18075 (comment)
2. IIRC many contributors accepted to maintain the gomail by ourselves since it's not complex.

[lunny]

How about convert to https://github.com/xhit/go-simple-mail .

[fredmenez]

FYI the maintainer of go-gomail/gomail has left this world, details in go-gomail/gomail#182.

[techknowlogick]

@fredmenez thank you for sharing this news with us ❤️ 🕯️

[Neustradamus]

Dear all, it is possible to change your code?
Change from here:

• https://github.com/go-gomail/gomail
• Where to Report Vulnerabilities? go-gomail/gomail#188
• https://github.com/go-mail/mail
• https://github.com/Shopify/gomail
• Where can I report vulnerabilities? Shopify/gomail#59
• https://github.com/ory/mail

It has been unmaintained and maybe one or more vulnerabilities :/

There are:

• https://github.com/xhit/go-simple-mail from @xhit
• https://github.com/wneessen/go-mail from @wneessen

Linked to:

• Maintainer has left this world go-gomail/gomail#182
• This seems to be unmaintained, here is an alternative go-gomail/gomail#163
• Project unmaintained go-gomail/gomail#142
• == Active Forks == go-gomail/gomail#108
• The maintainer is missing.  go-gomail/gomail#104
• ### Forked to github.com/go-mail/gomail ### go-gomail/gomail#105
• New Release Please go-gomail/gomail#94
• why the master code not updated? go-mail/mail#78
• Fork? go-mail/mail#73
• Project maintenance state go-mail/mail#61

[lunny]

Maybe https://github.com/wneessen/go-mail is a better choice.

[Neustradamus]

@lunny: Thanks for your reactivity!
Yes totally! :)

[lunny]

First step #32618 to move to the new package.

[Neustradamus]

@lunny: Thanks for your quick PR!

[Neustradamus]

Thanks to @lunny for this work to solve this important ticket:

Linked to:

• gomail library unmaintained #18664
• first PR: Split mail sender sub package from mailer service package #32618
• Second PR: Use new mail package instead of an unmintained one #32682

[Neustradamus]

@lunny: Good job, thanks!