Developer Area/Plugins/Third party: Difference between revisions
From Mahara Wiki
< Developer Area | Plugins
(→Legend) |
(Update information in preparation for updates for 22.04 release) |
||
| Line 15: | Line 15: | ||
* Deprecated: All maintainers have left and site may not exist in extreme cases. | * Deprecated: All maintainers have left and site may not exist in extreme cases. | ||
* 🚧: In progress/there is a working patch in gerrit | * 🚧: In progress/there is a working patch in gerrit | ||
* Sec. = is there a new security patch available? | |||
* 21.10 column: Yes = updating to the latest version according to SemVer in 'Mahara Version' column | * 21.10 column: Yes = updating to the latest version according to SemVer in 'Mahara Version' column | ||
* [https://nodejs.dev/learn/semantic-versioning-using-npm SemVer Info] | * [https://nodejs.dev/learn/semantic-versioning-using-npm SemVer Info] | ||
Last edited 22 Feb 2022 | |||
{| class="wikitable sortable" | {| class="wikitable sortable" | ||
|- style="font-weight:bold;" | |- style="font-weight:bold;" | ||
| Line 63: | Line 65: | ||
| MIT License | | MIT License | ||
| =4.17.47 | | =4.17.47 | ||
| | | 6.0.0-beta2 | ||
| Inactive,<br />v4 not maintained<br /> | | Inactive,<br />v4 not maintained<br />No longer requires Bootstrap | ||
| None | | None | ||
| | | | ||
| Line 116: | Line 118: | ||
| 2.0.1 | | 2.0.1 | ||
| Inactive, 2020 | | Inactive, 2020 | ||
| 2.0.1 released 22 Feb 2022 | | 2.0.1 released 22 Feb 2022<br />PHP8 compatible | ||
| | | | ||
| No | | No | ||
| Line 154: | Line 156: | ||
| ^5.7.6 | | ^5.7.6 | ||
| 5.9.3/6.0.0-beta.2 | | 5.9.3/6.0.0-beta.2 | ||
| Active | | Active <br /> Dropping IE support after 5.9.3 | ||
| Minor | | Minor | ||
| | | | ||
| Line 192: | Line 194: | ||
| CC BY-SA 4.0 | | CC BY-SA 4.0 | ||
| ~3.5.6 | | ~3.5.6 | ||
| | | 4.0.26 | ||
| Inactive<br />- v3 deprecated<br />- v4 in beta stage | | Inactive<br />- v3 deprecated<br />- v4 in beta stage | ||
| Patch fix | | Patch fix | ||
| Line 219: | Line 221: | ||
| =4.13.0 | | =4.13.0 | ||
| 4.14.0 | | 4.14.0 | ||
| | | 4.14 includes PHP8 support | ||
| None | | None | ||
| | | | ||
| Line 243: | Line 245: | ||
| http://jquery.com/<br />https://github.com/jquery/jquery | | http://jquery.com/<br />https://github.com/jquery/jquery | ||
| MIT License | | MIT License | ||
| ^3. | | ^3.6.0 | ||
| 3.6.0 | | 3.6.0 | ||
| Active | | Active | ||
| Line 270: | Line 272: | ||
| MIT License | | MIT License | ||
| =1.12.1 | | =1.12.1 | ||
| 1. | | 1.13.1 | ||
| Inactive, 2017 | | Inactive, 2017 | ||
| None | | None | ||
| Line 312: | Line 314: | ||
| Active | | Active | ||
| Major 2.x | | Major 2.x | ||
| | | 2.1.0: “fixed vulnerability in "http-server" package <br />(origin/feature/merges-20200227, feature/merges-20200227) | ||
| n/a | | n/a | ||
| | | | ||
| Line 351: | Line 353: | ||
| Active | | Active | ||
| Minor - v2.1.1, v2.1.2, v2.1.3<br />Major 3.x - breaking changes | | Minor - v2.1.1, v2.1.2, v2.1.3<br />Major 3.x - breaking changes | ||
| | | 4.0.0 Major security fixes | ||
| n/a | | n/a | ||
| Yes 🚧 | | Yes 🚧 | ||
| Line 428: | Line 430: | ||
| 6.5.4 | | 6.5.4 | ||
| Active<br /> | | Active<br /> | ||
| Minor 6.5.0 - security release<br />Minor 6.5.1 - maintenance release | | Minor 6.5.0 - security release<br />Minor 6.5.1 - maintenance release<br />PHP8 support | ||
| Yes | | Yes | ||
| Yes | | Yes | ||
| Line 441: | Line 443: | ||
| 2.11.2 | | 2.11.2 | ||
| Active v2<br />LTS 1.16.1 <br />w/o warnings | | Active v2<br />LTS 1.16.1 <br />w/o warnings | ||
| (Bootstrap 5 supports v2.x)<br />Major 2.x - breaking 2020 - 2.9.3<br />(bootstrap4) - Minor 1.16.1, Mar 2020 | | (Bootstrap 5 supports v2.x)<br />Major 2.x - breaking 2020 - 2.9.3<br />(bootstrap4) - Minor 1.16.1, Mar 2020 <br />Popper is now floating-ui, built ontop of popper, <br />different releases for core/react-native/react-dom | ||
| | | | ||
| n/a | | n/a | ||
| Line 451: | Line 453: | ||
| https://github.com/google/recaptcha | | https://github.com/google/recaptcha | ||
| BSD-3 | | BSD-3 | ||
| ^1.2. | | ^1.2.4 | ||
| 1.2.4 | | 1.2.4 | ||
| Active | | Active | ||
| Line 464: | Line 466: | ||
| https://github.com/simplesamlphp/<br />[https://github.com/simplesamlphp/simplesamlphp simplesamlphp] | | https://github.com/simplesamlphp/<br />[https://github.com/simplesamlphp/simplesamlphp simplesamlphp] | ||
| GPL 2.1 | | GPL 2.1 | ||
| ^1. | | ^1.18.7 | ||
| 1.19. | | 1.19.5 | ||
| Active | | Active | ||
| | | | ||
| Line 477: | Line 479: | ||
| https://select2.org/ | | https://select2.org/ | ||
| MIT License | | MIT License | ||
| ^4.0. | | ^4.0.13 | ||
| 4.0.13 | | 4.0.13 | ||
| Active | | Active | ||
| Line 503: | Line 505: | ||
| http://www.fontsquirrel.com/fonts/<br />DejaVu-Sans | | http://www.fontsquirrel.com/fonts/<br />DejaVu-Sans | ||
| DejaVu Fonts <br />License v1.00 | | DejaVu Fonts <br />License v1.00 | ||
| ^2. | | ^2.37 | ||
| 2.37 | | 2.37 | ||
| Unknown | | Unknown | ||
| Line 543: | Line 545: | ||
| SIL OFL 1.1 | | SIL OFL 1.1 | ||
| ^5.8.1 | | ^5.8.1 | ||
| | | 6.0.0 | ||
| Active | | Active | ||
| Minor | | Minor | ||
| Line 581: | Line 583: | ||
| https://www.tiny.cloud/<br />https://www.tiny.cloud/get-tiny/self-hosted | | https://www.tiny.cloud/<br />https://www.tiny.cloud/get-tiny/self-hosted | ||
| LGPL 2.1 | | LGPL 2.1 | ||
| ^5. | | ^5.8.2 | ||
| 5. | | 5.9+ | ||
| Active | | Active | ||
| | | Major security patch - XSS | ||
| | | Yes | ||
| n/a | | n/a | ||
| Yes 🚧 | | Yes 🚧 | ||
| Line 594: | Line 596: | ||
| http://videojs.com/<br />https://github.com/videojs/video.js | | http://videojs.com/<br />https://github.com/videojs/video.js | ||
| Apache License 2.0 | | Apache License 2.0 | ||
| ^7. | | ^7.14.3 | ||
| 7. | | 7.18.0 | ||
| Active | | Active | ||
| Minor | | Minor | ||
Revision as of 17:11, 22 February 2022
A list of the third party plugins within Mahara.
A helpful way to update this list is to go:
find ./htdocs -type f -iname "README.Mahara" -exec grep 'Version' -B1 {} \; -print
on the current codebase.
Note: another thing to keep in sync is the country names we use for 'Country' dropdowns. To check what the current state of play is
perl -MLocale::Country -le 'print join("\n", sort map { country2code($_) . " => " . country2code($_, LOCALE_CODE_ALPHA_3) . ", // " . $_ } all_country_names())'
and check the results against htdocs/lib/country.php and htdocs/lang/en.utf8/mahara.php files For any confusion you can also check against https://www.iso.org
Legend
- Inactive: Maintained but not actively making releases
- Deprecated: All maintainers have left and site may not exist in extreme cases.
- 🚧: In progress/there is a working patch in gerrit
- Sec. = is there a new security patch available?
- 21.10 column: Yes = updating to the latest version according to SemVer in 'Mahara Version' column
- SemVer Info
Last edited 22 Feb 2022
| Name | README.Mahara (./htdocs/...) |
URL | License | Mahara version |
Latest version |
Support | Upgrades | Sec. | PHP8 | 21.10 |
Notes |
|---|---|---|---|---|---|---|---|---|---|---|---|
| ADODB | .../lib/adodb/ | - https://adodb.org/dokuwiki/doku.php - https://github.com/ADOdb/ADOdb |
BSD 3-Clause LGPL |
^5.21.1 |
5.22.0 | End 5.20.20 | Security - 5.21.4 - pgsql: authentication bypass in connect functions (CVE-2021-3850) |
Yes | Yes 8.1 | Yes 🚧 | News: https://twitter.com/ADOdb_announce first. Wishlist: extract our $SESSION php 8.0 ready. |
| Bootstrap | .../lib/bootstrap/assets/javascripts/ |
- https://getbootstrap.com/ - https://github.com/twbs/release |
MIT License | ~4.6.0 | 5.1.3 | Ends 4.x (LTS) - 01 Nov 2022 |
Major e.g. 5.1.2 Updated JS Sanitizer to add sms in the SAFE_URL_PATTERN | n/a | |||
| Bootstrap Datetimepicker |
.../js/bootstrap-datetimepicker/ | https://getdatepicker.com/ https://github.com/tempusdominus/ bootstrap-4 |
MIT License | =4.17.47 | 6.0.0-beta2 | Inactive, v4 not maintained No longer requires Bootstrap |
None | n/a | runs using bootstrap and moment.js There is a version 5 but not finished. | ||
| Chart.js | .../js/chartjs/ | http://www.chartjs.org | MIT License | ^2.9.4 | 3.7.1 | LTS 2.x: 2.9.4 Active 3.x |
Major - 3.0.0 breaking changes https://www.chartjs.org/docs/next/ getting-started/v3-migration |
? | n/a | ||
| Clipboard js | .../js/clipboard/ | https://clipboardjs.com/ | MIT License | ^2.0.8 | 2.0.10 | Active | Patch fix | n/a | Yes 🚧 | ||
| Cookie consent |
.../js/cookieconsent/ | - https://www.osano.com/cookieconsent - https://github.com/osano/cookieconsent |
MIT License | =3.1.1 | 4.0 | New updates are proprietary. |
None | n/a | Site talks about versions 2021.6 and 2021.2.3 which are not available on GitHub. 💡Check if we should keep using this - licences. | ||
| CSS Tidy | .../lib/csstidy/ | https://github.com/Cerdic/CSSTidy | LGPL | ~1.7.3 | 2.0.1 | Inactive, 2020 | 2.0.1 released 22 Feb 2022 PHP8 compatible |
No | No activity on the repo in the last year. | ||
| Dragon-drop | ..../js/dragondrop/ | https://github.com/schne324/dragon-drop | MIT License | ^3.2.1 | 3.2.1 |
Active | None Pre-release minor changelog not available. |
n/a | 3.6.1 in the making but in pre-release stages. | ||
| Datatables | https://datatables.net/ https://datatables.net/download/index |
MIT License | ^1.10.20 | 1.11.4 | Active |
Patch fix | n/a | Yes 🚧 | |||
| Dropzone | .../js/dropzone/ | https://github.com/dropzone/dropzone/releases | MIT License | ^5.7.6 | 5.9.3/6.0.0-beta.2 | Active Dropping IE support after 5.9.3 |
Minor | n/a | Yes 🚧 | ||
| Dwoo | .../lib/dwoo/ | http://dwoo.org/ https://github.com/dwoo-project/dwoo |
LGPL | =1.3.7 | 1.3.7 | Deprecated |
Replace | No | |||
| Elastic Search | .../lib/elasticsearch/ | https://github.com/elastic/elasticsearch-php | Apache v2.0 LGPL v2.1 |
>6.1.0 | 7.17.0 | Active |
WIP - Gold | No | PHP 8 has a milestone. | ||
| fancybox3 | .../js/fancybox/ | https://github.com/fancyapps/ui - in BETA stage https://fancyapps.com/docs/ui/installation |
CC BY-SA 4.0 | ~3.5.6 | 4.0.26 | Inactive - v3 deprecated - v4 in beta stage |
Patch fix | n/a | Yes 🚧 | https://fancyapps.com/next/ Notifications: https://twitter.com/thefancyapps | |
| gridstack | .../js/gridstack/ | https://github.com/gridstack/gridstack.js | MIT License | >0.6.4 | 5.0.0 | Active | WIP - Robert |
n/a | https://gridstackjs.com | ||
| HTML Purifier | .../lib/htmlpurifier/ | http://www.htmlpurifier.org/ | LGPL v2.1+ | =4.13.0 | 4.14.0 | 4.14 includes PHP8 support | None | ?? | https://github.com/ezyang/htmlpurifier/ blob/v4.13.0/NEWS PHP 8 support looks to be in progress but can't determine with confidence. | ||
| Javascript templates |
.../js/javascript-templates/ | https://github.com/blueimp/ JavaScript-Templates |
MIT License | =3.19.0 | 3.20.0 | Inactive, 2020 | None | n/a | |||
| jQuery | .../js/jquery/ | http://jquery.com/ https://github.com/jquery/jquery |
MIT License | ^3.6.0 | 3.6.0 | Active | Minor | n/a | Yes 🚧 | https://blog.jquery.com/2021/03/02/ jquery-3-6-0-released/ News: - QA: https://forum.jquery.com/ Twitter: https://twitter.com/jquery | |
| jQuery mobile | .../js/jquery/jquery-mobile/ | http://jquerymobile.com | MIT License | =1.5.0-alpha.1 | 1.5.0-rc1 | Inactive, 2017 | None | n/a | https://blog.jquerymobile.com - lack of resources but wish to maintain. ❗Find out if we are still using this. | ||
| jQuery UI | .../js/jquery/jquery-ui/ | http://jqueryui.com/ | MIT License | =1.12.1 | 1.13.1 | Inactive, 2017 | None | n/a | https://blog.jqueryui.com/ - lack of resources but with to maintain. | ||
| jQuery UI plugin touch-punch |
.../js/jquery/jquery-ui/ jquery-ui-touch-punch.min.js |
http://touchpunch.furf.com/ https://github.com/furf/jquery-ui-touch-punch |
MIT or GPL Version 2 licenses |
=0.2.3 | 0.2.3 | Deprecated | None | n/a | ❗Do we still need it - is it merged into jquery | ||
| JS Color | .../js/jscolor/ | http://jscolor.com/ | GPL 3 | ^2.4.5 | 2.4.7 | Active | None | n/a | |||
| Json editor | .../js/jsoneditor/ | https://github.com/json-editor/json-editor | MIT License | >=1.3.5 | 2.6.1 | Active | Major 2.x | 2.1.0: “fixed vulnerability in "http-server" package (origin/feature/merges-20200227, feature/merges-20200227) |
n/a | Leave for for 22.04 | |
| jTLine | .../js/jTLine/ | https://naadydev.github.io/jTLine/ | MIT License | =1.0 | 1.0 | Inactive, 2018 | None | n/a | https://twitter.com/naadydev | ||
| Lodash | .../js/lodash/ | https://github.com/lodash/lodash | MIT License | ^4.17.15 | 4.17.21 | Active | Patch fix | n/a | - Lodash was brought in with gridstack v0.5.0 - Will be removed when gridstack 4+ gets merged. | ||
| Marked | .../js/marked/ | https://github.com/markedjs/marked | MIT License | ^2.1.3 | 4.0.12 | Active | Minor - v2.1.1, v2.1.2, v2.1.3 Major 3.x - breaking changes |
4.0.0 Major security fixes | n/a | Yes 🚧 | |
| Masonry | .../js/masonry/ | https://masonry.desandro.com/ https://github.com/desandro/masonry |
MIT License | =4.2.2 | 4.2.2 | Inactive, 2018 | None | n/a | |||
| TinyMCE Mathslate |
.../js/tinymce/plugins/mathslate/ | https://github.com/dthies/tinymce4-mathslate | GPL 3 | =1.1 | 1.1 | Forked version, 2015 | None | n/a | Our version is now forked to keep make it work with Tinymce 5 | ||
| Moment.js | .../js/momentjs/ | http://momentjs.com/ | MIT License | ^2.29.1 | 2.29.1 | Inactive, 2020 | None | n/a | Connected with jquery date-picker | ||
| Oauth PHP | .../webservice/libs/oauth-php/ | https://code.google.com/archive/p/oauth-php/ | MIT License | =175 | 175 | Archived, 2010 | Replace | No | We should replace with an oauth2 php library https://oauth.net/code/php checkout what Moodle does (old comment) | ||
| PDFjs | .../artefact/file/blocktype/pdf/js/pdfjs/ | http://mozilla.github.io/pdf.js/ getting_started/#download https://github.com/mozilla/pdf.js |
Apache License 2 | ^2.9.359 | 2.12.313 |
Active | Minor | n/a | Yes 🚧 | ||
| PHPMailer | .../lib/phpmailer/ | https://github.com/PHPMailer/PHPMailer | LGPL | ^6.5.1 | 6.5.4 | Active |
Minor 6.5.0 - security release Minor 6.5.1 - maintenance release PHP8 support |
Yes | Yes | Yes 🚧 | |
| Popper | .../lib/popper/ | https://popper.js.org/ | MIT License | ^1.16.1 LTS | 2.11.2 | Active v2 LTS 1.16.1 w/o warnings |
(Bootstrap 5 supports v2.x) Major 2.x - breaking 2020 - 2.9.3 (bootstrap4) - Minor 1.16.1, Mar 2020 Popper is now floating-ui, built ontop of popper, different releases for core/react-native/react-dom |
n/a | https://dev.to/fezvrasta/smarter-tooltips-and -popovers-with-popper-2-44bh | ||
| ReCaptcha | .../lib/recaptcha/ | https://github.com/google/recaptcha | BSD-3 | ^1.2.4 | 1.2.4 | Active | Patch | In progress | Yes 🚧 | This client supports both v2 and v3. https://github.com/google/recaptcha/tree/php8-support | |
| simplesamlphp | ../auth/saml/extlib/simplesamlphp/ | https://github.com/simplesamlphp/ simplesamlphp |
GPL 2.1 | ^1.18.7 | 1.19.5 | Active | Yes 8.1 | /htdocs/auth/saml/extlib/ - Make a README.Mahara file PHP 8 coming in v2.x. Sounds like it should work on 1.19.1 though. | |||
| Select2 | .../js/select2/ | https://select2.org/ | MIT License | ^4.0.13 | 4.0.13 | Active | Patch | n/a | Yes 🚧 | ||
| Aurulent Sans (font) |
.../lib/fonts/ | http://www.fontsquirrel.com/fonts/ Aurulent-Sans |
SIL OFL v1.10 | ^2007.05.04 | 2007.05.04 | Unknown | None | n/a | |||
| Deja Vu Sans (font) |
.../lib/fonts/ | http://www.fontsquirrel.com/fonts/ DejaVu-Sans |
DejaVu Fonts License v1.00 |
^2.37 | 2.37 | Unknown | Patch | n/a | Yes 🚧 | ||
| Open Sans (font) |
.../theme/raw/fonts/ | https://www.google.com/fonts/ specimen/Open+Sans |
Apache License version 2.0 |
^1.10 | 1.10 | Unknown | None | n/a | |||
| Roboto Slab (font) |
.../theme/raw/fonts/ | https://www.google.com/fonts/ specimen/Roboto+Slab |
MIT License | ^1.9 | 1.100263 | Unknown | Minor | n/a | Yes 🚧 | ||
| Fontawesome | .../theme/raw/sass/lib/font-awesome/ | http://fontawesome.io https://github.com/FortAwesome/Font-Awesome |
SIL OFL 1.1 | ^5.8.1 | 6.0.0 | Active | Minor | n/a | Yes 🚧 | https://github.com/FortAwesome/Font-Awesome /blob/master/UPGRADING.md | |
| Ghostscript fonts |
.../theme/raw/fonts/ | - http://sourceforge.net/projects/gs-fonts/ - https://www.ghostscript.com/releases.html |
AGPL | ^8.11 | 9.54.0 | Active | Major | n/a | ❗What do we use it for? | ||
| Charis SIL (fonts) |
.././lib/fonts/ | - http://scripts.sil.org/cms/scripts/page.php ?item_id=CharisSIL - https://software.sil.org/charis/download/ |
SIL OFL | ^5.000 | 6.001 | Active | Major | n/a | |||
| TinyMCE | .../js/tinymce/ | https://www.tiny.cloud/ https://www.tiny.cloud/get-tiny/self-hosted |
LGPL 2.1 | ^5.8.2 | 5.9+ | Active | Major security patch - XSS | Yes | n/a | Yes 🚧 | https://www.tiny.cloud/docs/changelog/ 📲 Test on mobile when updating https://www.tiny.cloud/blog/category/ news-and-updates/ |
| Video.js | .../artefact/file/blocktype/ internalmedia/videojs/ |
http://videojs.com/ https://github.com/videojs/video.js |
Apache License 2.0 | ^7.14.3 | 7.18.0 | Active | Minor | n/a | Yes🚧 | ||
| zxcvbn | .../js/zxcvbn/ | https://github.com/dropbox/zxcvbn | MIT License | =4.4.2 | 4.4.2 | Inactive, 2017 | None | n/a | |||
| composer.json dependencies |
https://git.mahara.org /mahara/mahara/-/blob/ master/external/composer.json |
Check for updates in the .json file. |