this post was submitted on 24 Dec 2025
63 points (100.0% liked)

Linux

10736 readers
651 users here now

A community for everything relating to the GNU/Linux operating system (except the memes!)

Also, check out:

Original icon base courtesy of lewing@isc.tamu.edu and The GIMP

founded 2 years ago
MODERATORS
 

In an excellent example of one of the most overused XKCD images, the libxml2 library has for a little while lost its only maintainer, with [Nick Wellnhofer] making good on his plan to step down by the end of the year.

While this might not sound like a big deal, the real scope of this problem is rather profound. Not only is libxml2 part of GNOME, it’s also used as dependency by a huge number of projects, including web browsers and just about anything that processes XML or XSLT. Not having a maintainer in the event that a fresh, high-risk CVE pops up would obviously be less than desirable.

top 3 comments
sorted by: hot top controversial new old
[–] melroy@kbin.melroy.org 6 points 9 hours ago (1 children)

Another maintainer already jumped in and he is now maintaining it. The original author forked it actually his own project, and is planning to release it under gpl license (instead of MIT), basically making it open source in a sense I can'tbe used by big tech. Since that was his point, large software projects and companies relied on his work. Yet nobody is paying him.

[–] melroy@kbin.melroy.org 2 points 8 hours ago

Also he was getting every week cve issues, which are often not urgent issues. Yet it costs him a lot of time. He also considers security issues now just the same as a normal issue. Not giving it priority anymore, since that doesn't make sense anymore for him.

[–] CameronDev@programming.dev 4 points 16 hours ago

Babe, wake up, the new Jia Tan dropped!