> On 31 Jan 2017, at 10:43, Landry Breuil <lan...@openbsd.org> wrote: > > Hi, > > so the following ports use www/webkit or www/webkit,gtk3: > > cad/xtrkcad > graphics/ebook-viewer > mail/claws-mail > mail/geary > productivity/gnucash > www/luakit > www/midori > www/surf > www/vimb > > www/webkit is the 2.4 branch, which is dead/abandoned/unmaintained > upstream, cf > https://blogs.gnome.org/mcatanzaro/2016/02/01/on-webkit-security-updates/ > and https://lists.webkit.org/pipermail/webkit-gtk/2016-September/002779.html > > The security circus being what it is (OMG YOUR OS SHIPS AN INSECURE > LIBRARY STOP THE PRESS IM GOING TO SHAME YOU ON TWITTER), it would be > nice to get rid of this, so can the ones maintaining those ports try to > reach the respective upstreams and see if there's a way to make those > ports use www/webkitgtk4 (which is maintained, until upstream webkit > becomes crazy again..) ? gmpc-wikipedia and py-webkitgtk have already > been removed. > > I'll have a look at what can be done for geary and midori. As for surf, > there's surf2… ?
While surf is still under active development and repo is seeing commits, there seem to be no interest from the upstream maintainers to move to a newer webkit. AFAIK, surf2 is just a hand-rolled tarball from “experimental” branch and has it’s own problems. However, surf2 works good enough as replacement so I’m fine with removing www/surf. Maybe even rename surf2 to surf then? @czarkoff: What do you think? > Thanks to Davide Gerhard for insisting on getting this fixed, one way > or another... > > Landry >
