python3Packages.bjoern: drop
This package depends on a 14-year-old version of http-parser, which has numerous security issues. The upstream also hasn't been updated in several years, so this is a security issue to keep around.
This commit is contained in:
@@ -26,6 +26,8 @@
|
||||
|
||||
- `base16-builder` node package has been removed due to lack of upstream maintenance.
|
||||
|
||||
- `python3Packages.bjoern` has been removed, as the upstream is unmaintained and it depends on a 14-year-old version of http-parser with numerous vulnerabilities.
|
||||
|
||||
- `buildGoModule` now warns if `<pkg>.passthru.overrideModAttrs` is lost during the overriding of its result packages.
|
||||
|
||||
- `gentium` package now provides `Gentium-*.ttf` files, and not `GentiumPlus-*.ttf` files like before. The font identifiers `Gentium Plus*` are available in the `gentium-plus` package, and if you want to use the more recently updated package `gentium` [by sil](https://software.sil.org/gentium/), you should update your configuration files to use the `Gentium` font identifier.
|
||||
|
||||
@@ -1,39 +0,0 @@
|
||||
{
|
||||
lib,
|
||||
buildPythonPackage,
|
||||
fetchFromGitHub,
|
||||
libev,
|
||||
python,
|
||||
setuptools,
|
||||
}:
|
||||
|
||||
buildPythonPackage rec {
|
||||
pname = "bjoern";
|
||||
version = "3.2.2";
|
||||
pyproject = true;
|
||||
|
||||
src = fetchFromGitHub {
|
||||
owner = "jonashaag";
|
||||
repo = "bjoern";
|
||||
tag = version;
|
||||
hash = "sha256-drFLM6GsgrM8atQDxmb3/1bpj+C1WetQLjNbZqCTzog=";
|
||||
fetchSubmodules = true; # fetch http-parser and statsd-c-client submodules
|
||||
};
|
||||
|
||||
build-system = [ setuptools ];
|
||||
|
||||
buildInputs = [ libev ];
|
||||
|
||||
checkPhase = ''
|
||||
${python.interpreter} tests/keep-alive-behaviour.py 2>/dev/null
|
||||
${python.interpreter} tests/test_wsgi_compliance.py
|
||||
'';
|
||||
|
||||
meta = with lib; {
|
||||
homepage = "https://github.com/jonashaag/bjoern";
|
||||
description = "Screamingly fast Python 2/3 WSGI server written in C";
|
||||
changelog = "https://github.com/jonashaag/bjoern/blob/${src.tag}/CHANGELOG";
|
||||
license = licenses.bsd2;
|
||||
maintainers = with maintainers; [ cmcdragonkai ];
|
||||
};
|
||||
}
|
||||
@@ -109,6 +109,7 @@ mapAliases ({
|
||||
bedup = throw "bedup was removed because it was broken and abandoned upstream"; # added 2023-02-04
|
||||
bip_utils = bip-utils; # 2023-10-08
|
||||
bitcoin-price-api = throw "bitcoin-price-api has been removed, it was using setuptools 2to3 translation feautre, which has been removed in setuptools 58"; # added 2022-02-15
|
||||
bjoern = throw "'bjoern' has been removed, as the upstream repository was unmaintained and it was using libraries with severe security issues."; # Added 2025-09-01
|
||||
bkcharts = throw "'bkcharts' has been removed as the upstream repository was archived in 2018"; # added 2025-08-26
|
||||
blessings = throw "blessings has been removed in favor of blessed, as it was unmaintained"; # added 2024-08-20
|
||||
BlinkStick = blinkstick; # added 2023-02-19
|
||||
|
||||
@@ -1933,8 +1933,6 @@ self: super: with self; {
|
||||
|
||||
bizkaibus = callPackage ../development/python-modules/bizkaibus { };
|
||||
|
||||
bjoern = callPackage ../development/python-modules/bjoern { };
|
||||
|
||||
bk7231tools = callPackage ../development/python-modules/bk7231tools { };
|
||||
|
||||
black = callPackage ../development/python-modules/black { };
|
||||
|
||||
Reference in New Issue
Block a user