Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

This proposal is being created as part of 

Jira Legacy
serverJIRA (openedx.atlassian.net)
serverId13fd1930-5608-3aac-a5dd-21b934d3a4b4
keyTNL-6125

...

  1. Update the README.rst file in the repository to state that it is deprecated and that the repository may depend on out-of-date libraries with security issues.
  2. If the repository has a openedx.yaml file, add "obsolete:True" to that file.
  3. Transfer ownership of the repository to edx-deprecated. See How To Transfer a Github Repo From a Personal Account to edX for an idea of what these steps may look like; a dedicated How-to will be created for the process once this proposal is approved.
  4. Send an email to edx-code@googlegroups.com notifying the openedx community about the change.
  5. If transferring a repository to edx-deprecated does not automatically cause Gemnasium to stop reporting on it, create a Devops ticket for this additional piece of work.
  6. Remove any integrations which aren't relevant anymore.
  7. Remove any webhooks which aren't relevant anymore.

...

  1. Update the README.rst file in the repository to state that it is deprecated and that the repository may depend on out-of-date libraries with security issues.
  2. Add "obsolete: True" to openedx.yaml (creating the file if necessary).
  3. Send an email to edx-code@googlegroups.com notifying the openedx community about the change.
  4. Create a DevOps ticket to change the status of the repo to "non-monitored" in Gemnasium.
    1. In the future, automation could be added that uses Gemansium APIs to update the monitored status based on the value of "obsolete" in openedx.yaml.
  5. Remove any integrations which aren't relevant anymore.
  6. Remove any webhooks which aren't relevant anymore.

Pros

  • We don't need to create and "maintain" a new organization.
  • We are not duplicating the "obsolete" information in openedx.yaml.
  • No extra help tickets are needed-- either IT or Devops would have needed to handle the repository transfer anyway, and the work involved to change the monitored status in Gemnasium is probably simpler.

...

  1. Update the README.rst file in the repository to state that it is deprecated and that the repository may depend on out-of-date libraries with security issues.
  2. Add "obsolete: True" to openedx.yaml (creating the file if necessary).
  3. Send an email to edx-code@googlegroups.com notifying the openedx community about the change.
  4. Follow similar directions as proposed here: https://helloanselm.com/2013/handle-deprecated-unmaintained-repositories/ to:
    1. Clone the master branch to a deprecated branch.
    2. Remove all code from the master branch
    3. Move a copy of the openedx.yaml with the obsolete: true flag back to the master branch.
    4. Create a short readme.md in the master branch with links to alternatives or information about why the repo was deprecated and where someone can find out more information about how to move forward.
  5. Remove any integrations which aren't relevant anymore.
  6. Remove any webhooks which aren't relevant anymore.

Pros

  • We don't need to create and "maintain" a new organization.
  • We are not duplicating the "obsolete" information in openedx.yaml.
  • No extra help tickets are needed, as Gemnasium monitors only the master branch by default.

...