Re: [Log4j] Potential support/dev policy for plugins

2024-06-17 Thread Christian Grobmeier
+1 Sounds like a good thing. Being in the top 8% of most critical open source projects requires us to consider everything very carefully I also see that we need to adopt the Airflow requirements to us a bit, but they are indeed a very good start -- The Apache Software Foundation V.P., Data Pri

Re: [Log4j] Potential support/dev policy for plugins

2024-06-17 Thread Piotr P. Karwasz
Hi Matt, On Tue, 11 Jun 2024 at 22:15, Matt Sicker wrote: > While I think we can adapt the Airflow guidance to Log4j, we will likely have > some different requirements. I think this would help a lot in determining > when and for how long to support plugins that involve third party > dependenci

[Log4j] Potential support/dev policy for plugins

2024-06-11 Thread Matt Sicker
I spoke with Jarek at Community Over Code Conference EU last week about an interesting policy Airflow uses to manage their ecosystem of providers. [1] In short, they have policies for accepting, maintaining, and removing providers based on various constraints. The general approach seems like a g