Actions

Developer Area/Plugins/Third party: Difference between revisions

From Mahara Wiki

< Developer Area‎ | Plugins
(Proposed layout change for this page)
(Re-order columns)
Line 11: Line 11:


==== Legend ====
==== Legend ====
 
* '''PHP8''' = is the latest version of this plugin compatible with PHP8?
* '''Upgrades''' = what upgrades are available for this plugin?
* '''Security''' = is there a new security patch available?
* '''22.04''' column: Yes = updating to the latest version according to SemVer in 'Mahara Version' column
* [https://nodejs.dev/learn/semantic-versioning-using-npm SemVer Info]
* Inactive: Maintained but not actively making releases
* Inactive: Maintained but not actively making releases
* Deprecated: All maintainers have left and site may not exist in extreme cases.
* Deprecated: All maintainers have left and site may not exist in extreme cases.
* 🚧: In progress/there is a working patch in gerrit
* 🚧: In progress/there is a working patch in gerrit
* Sec. = is there a new security patch available?
* 21.10 column: Yes = updating to the latest version according to SemVer in 'Mahara Version' column
* [https://nodejs.dev/learn/semantic-versioning-using-npm SemVer Info]
Last edited 22 Feb 2022
{| class="wikitable"
|+ ADODB
|-
| '''README.Mahara (./htdocs/...)''' || .../lib/adodb/
|-
| '''URL''' || - https://adodb.org/dokuwiki/doku.php
- https://github.com/ADOdb/ADOdb
|-
| '''License''' || BSD 3-Clause LGPL
|-
| '''Mahara version''' || ^5.21.1
|-
| '''Latest version''' || 5.22.0
|-
| '''Support''' || End 5.20.20
|-
| '''Upgrades''' || Security - 5.21.4 - pgsql: authentication bypass in connect functions (CVE-2021-3850)
|-
| '''Security issue?''' || Yes
|-
| '''PHP8''' || Yes 8.1
|-
| '''22.04''' || Yes 🚧
|-
| '''Notes''' || News: https://twitter.com/ADOdb_announce first. Wishlist: extract our $SESSION php 8.0 ready.
|}
{| class="wikitable"
|+ Bootstrap
|-
| '''README.Mahara (./htdocs/...)''' || .../lib/bootstrap/assets/javascripts/
|-
| '''URL''' || - https://getbootstrap.com/<br /> - https://github.com/twbs/release
|-
| '''License''' || MIT License
|-
| '''Mahara version''' || ~4.6.0
|-
| '''Latest version''' || 5.1.3
|-
| '''Support''' || Ends 4.x (LTS) - 01 Nov 2022
|-
| '''Upgrades''' || Major e.g. 5.1.2 Updated JS Sanitizer to add sms in the SAFE_URL_PATTERN
|-
| '''Security issue?''' ||
|-
| '''PHP8''' || n/a
|-
| '''22.04''' ||
|-
| '''Notes''' ||
|}


Last edited 23 Feb 2022
{| class="wikitable sortable"  
{| class="wikitable sortable"  
|- style="font-weight:bold;"
|- style="font-weight:bold; text-align:center;"
! Name
! '''Name'''
! README.Mahara <br />(./htdocs/...)
! '''Mahara <br />version'''
! URL
! '''Latest<br />version<br />'''
! License
! '''21.10'''
! Mahara <br />version
! '''PHP8'''
! Latest<br />version<br />
! '''Upgrades'''
! Support
! '''Support'''
! Upgrades
! '''Security'''
! Sec.
! '''Notes'''
! PHP8
! '''README.Mahara <br />(./htdocs/...)'''
! 21.10<br />
! '''URL'''
! Notes
! '''License'''
|-
|-
| style="font-weight:bold;" | ADODB
| style="font-weight:bold;" | ADODB
| ^5.21.1<br />
| 5.22.0
| Yes 🚧
| Yes 8.1
| style="color:#333;" | Security - 5.21.4<br />- pgsql: authentication bypass in connect <br />functions (CVE-2021-3850)
| End 5.20.20
| Yes
| News: https://twitter.com/ADOdb_announce first.<br />Wishlist: [https://bugs.launchpad.net/mahara/+bug/1945264 extract our $SESSION]<br />php 8.0 ready.
| .../lib/adodb/
| .../lib/adodb/
| - https://adodb.org/dokuwiki/doku.php<br />- https://github.com/ADOdb/ADOdb
| - https://adodb.org/dokuwiki/doku.php<br />- https://github.com/ADOdb/ADOdb
| BSD 3-Clause<br />LGPL
| BSD 3-Clause<br />LGPL
| ^5.21.1<br />
| style="color:#000000;" | 5.22.0
| End 5.20.20
| style="color:#333333;" | Security - 5.21.4<br />- pgsql: authentication bypass in connect functions (CVE-2021-3850)
| Yes
| Yes 8.1
| Yes 🚧
| News: https://twitter.com/ADOdb_announce first.<br>Wishlist: [https://bugs.launchpad.net/mahara/+bug/1945264 extract our $SESSION]<br>php 8.0 ready.
|-
|-
| style="font-weight:bold;" | Bootstrap
| style="font-weight:bold;" | Bootstrap
| .../lib/bootstrap/assets/javascripts/<br />
| - https://getbootstrap.com/<br />- https://github.com/twbs/release
| MIT License
| ~4.6.0
| ~4.6.0
| 5.1.3
| 5.1.3
|
| n/a
| Major e.g. 5.1.2 Updated JS Sanitizer to add <br />sms in the SAFE_URL_PATTERN
| Ends 4.x (LTS) <br />- 01 Nov 2022
| Ends 4.x (LTS) <br />- 01 Nov 2022
| Major e.g. 5.1.2 Updated JS Sanitizer to add sms in the SAFE_URL_PATTERN
|  
|  
| n/a
|  
| <br />
| .../lib/bootstrap/assets/javascripts/<br />
| - https://getbootstrap.com/<br />- https://github.com/twbs/release
| MIT License
|-
|-
| style="font-weight:bold;" | Bootstrap <br />Datetimepicker
| style="font-weight:bold;" | Bootstrap <br />Datetimepicker
| .../js/bootstrap-datetimepicker/
| https://getdatepicker.com/<br />https://github.com/tempusdominus/<br />bootstrap-4
| MIT License
| =4.17.47
| =4.17.47
| 6.0.0-beta2
| 6.0.0-beta2
| Inactive,<br />v4 not maintained<br />No longer requires Bootstrap
| None
|  
|  
| n/a
| n/a
| None
| Inactive,<br />v4 not maintained<br />No longer requires Bootstrap
|  
|  
| runs using bootstrap and moment.js  <br />There is a version 5 but not finished.
| runs using bootstrap and moment.js  <br />There is a version 5 but not finished.
| .../js/bootstrap-datetimepicker/
| https://getdatepicker.com/<br />https://github.com/tempusdominus/<br />bootstrap-4
| MIT License
|-
|-
| style="font-weight:bold;" | Chart.js
| style="font-weight:bold;" | Chart.js
| .../js/chartjs/
| http://www.chartjs.org
| MIT License
| ^2.9.4
| ^2.9.4
| 3.7.1
| 3.7.1
|
| n/a
| Major - 3.0.0 breaking changes<br />https://www.chartjs.org/docs/next/<br />getting-started/v3-migration
| LTS 2.x: 2.9.4<br />Active 3.x<br />
| LTS 2.x: 2.9.4<br />Active 3.x<br />
| Major - 3.0.0 breaking changes<br />https://www.chartjs.org/docs/next/<br />getting-started/v3-migration
| ?
| ?
| n/a
|  
| <br />
| .../js/chartjs/
| http://www.chartjs.org
| MIT License
|-
|-
| style="font-weight:bold;" | Clipboard js
| style="font-weight:bold;" | Clipboard js
| .../js/clipboard/
| https://clipboardjs.com/
| MIT License
| ^2.0.8
| ^2.0.8
| 2.0.10
| 2.0.10
| Yes 🚧
| n/a
| Patch fix
| Active
| Active
| Patch fix
|  
|  
| n/a
| Yes 🚧
|  
|  
| .../js/clipboard/
| https://clipboardjs.com/
| MIT License
|-
|-
| style="font-weight:bold;" | Cookie <br />consent
| style="font-weight:bold;" | Cookie <br />consent
| .../js/cookieconsent/
| - https://www.osano.com/cookieconsent<br />- https://github.com/osano/cookieconsent<br />
| MIT License
| =3.1.1
| =3.1.1
| 4.0
| 4.0
| New updates are<br />proprietary.
| None
|  
|  
| n/a
| n/a
| None
| New updates are<br />proprietary.
|  
|  
| Site talks about versions 2021.6 and 2021.2.3 <br />which are not available on GitHub.<br />💡Check if we should keep using this - licences.
| Site talks about versions 2021.6 and 2021.2.3 <br />which are not available on GitHub.<br />💡Check if we should keep using this - licences.
| .../js/cookieconsent/
| - https://www.osano.com/cookieconsent<br />- https://github.com/osano/cookieconsent<br />
| MIT License
|-
|-
| style="font-weight:bold;" | CSS Tidy
| style="font-weight:bold;" | CSS Tidy
| .../lib/csstidy/
| https://github.com/Cerdic/CSSTidy
| LGPL
| ~1.7.3
| ~1.7.3
| 2.0.1
| 2.0.1
| Inactive, 2020
| 2.0.1 released 22 Feb 2022<br />PHP8 compatible
|  
|  
| No
| No
| 2.0.1 released 22 Feb 2022<br />PHP8 compatible
| Inactive, 2020
|  
|  
| No activity on the repo in the last year.
| No activity on the repo in the last year.
| .../lib/csstidy/
| https://github.com/Cerdic/CSSTidy
| LGPL
|-
|-
| style="font-weight:bold;" | Dragon-drop
| style="font-weight:bold;" | Dragon-drop
| ..../js/dragondrop/
| https://github.com/schne324/dragon-drop
| MIT License
| ^3.2.1
| ^3.2.1
| 3.6.1<br />
| 3.6.1<br />
| Active
| None<br />Pre-release minor <br />changelog not available.
|  
|  
| n/a
| n/a
| None<br />Pre-release minor <br />changelog not available.
| Active
|  
|  
| 3.6.1 in the making but in pre-release stages.
| 3.6.1 in the making but in pre-release stages.
| ..../js/dragondrop/
| https://github.com/schne324/dragon-drop
| MIT License
|-
|-
| style="font-weight:bold;" | Datatables
| style="font-weight:bold;" | Datatables
|
| https://datatables.net/<br />https://datatables.net/download/index<br />
| MIT License
| ^1.10.20
| ^1.10.20
| 1.11.4
| 1.11.4
| Yes 🚧
| n/a
| Patch fix
| Active<br />
| Active<br />
| Patch fix
|  
|  
| n/a
| Yes 🚧
|  
|  
|
| https://datatables.net/<br />https://datatables.net/download/index<br />
| MIT License
|-
|-
| style="font-weight:bold;" | Dropzone
| style="font-weight:bold;" | Dropzone
| .../js/dropzone/
| https://github.com/dropzone/dropzone/releases
| MIT License
| ^5.7.6
| ^5.7.6
| 5.9.3/6.0.0-beta.2
| 5.9.3/6.0.0-beta.2
| Yes 🚧
| n/a
| Minor
| Active <br /> Dropping IE support after 5.9.3
| Active <br /> Dropping IE support after 5.9.3
| Minor
|  
|  
| n/a
| Yes 🚧
|  
|  
| .../js/dropzone/
| https://github.com/dropzone/dropzone/releases
| MIT License
|-
|-
| style="font-weight:bold;" | Dwoo
| style="font-weight:bold;" | Dwoo
| .../lib/dwoo/
| http://dwoo.org/<br />https://github.com/dwoo-project/dwoo
| LGPL
| =1.3.7
| =1.3.7
| 1.3.7
| 1.3.7
| Deprecated<br />
| Replace
|  
|  
| No
| No
| Replace
| Deprecated<br />
|  
|  
|  
|  
| .../lib/dwoo/
| http://dwoo.org/<br />https://github.com/dwoo-project/dwoo
| LGPL
|-
|-
| style="font-weight:bold;" | Elastic Search
| style="font-weight:bold;" | Elastic Search
| .../lib/elasticsearch/
| style="color:#333;" | >6.1.0
| https://github.com/elastic/elasticsearch-php
| Apache v2.0 <br />LGPL v2.1
| style="color:#333333;" | >6.1.0
| 7.17.0
| 7.17.0
| Active<br />
| WIP - Gold
|  
|  
| No
| No
| WIP - Gold
| Active<br />
|  
|  
| PHP 8 has a [https://github.com/elastic/elasticsearch-php/milestone/6 milestone].
| PHP 8 has a [https://github.com/elastic/elasticsearch-php/milestone/6 milestone].
| .../lib/elasticsearch/
| https://github.com/elastic/elasticsearch-php
| Apache v2.0 <br />LGPL v2.1
|-
|-
| style="font-weight:bold;" | fancybox3
| style="font-weight:bold;" | fancybox3
| .../js/fancybox/
| https://github.com/fancyapps/ui - in BETA stage<br />https://fancyapps.com/docs/ui/installation
| CC BY-SA 4.0
| ~3.5.6
| ~3.5.6
| 4.0.26
| 4.0.26
| Yes 🚧
| n/a
| Patch fix
| Inactive<br />- v3 deprecated<br />- v4 in beta stage
| Inactive<br />- v3 deprecated<br />- v4 in beta stage
| Patch fix
|  
|  
| n/a
| Yes 🚧
| https://fancyapps.com/next/<br />Notifications: https://twitter.com/thefancyapps
| https://fancyapps.com/next/<br />Notifications: https://twitter.com/thefancyapps
| .../js/fancybox/
| https://github.com/fancyapps/ui - in BETA stage<br />https://fancyapps.com/docs/ui/installation
| CC BY-SA 4.0
|-
|-
| style="font-weight:bold;" | gridstack
| style="font-weight:bold;" | gridstack
| .../js/gridstack/
| https://github.com/gridstack/gridstack.js
| MIT License
| >0.6.4
| >0.6.4
| 5.0.0
| 5.0.0
| Active
| WIP - Robert<br />
|  
|  
| n/a
| n/a
| WIP - Robert<br />
| Active
|  
|  
| https://gridstackjs.com
| https://gridstackjs.com
| .../js/gridstack/
| https://github.com/gridstack/gridstack.js
| MIT License
|-
|-
| style="font-weight:bold;" | HTML Purifier
| style="font-weight:bold;" | HTML Purifier
| .../lib/htmlpurifier/
| http://www.htmlpurifier.org/
| LGPL v2.1+
| =4.13.0
| =4.13.0
| 4.14.0
| 4.14.0
| 4.14 includes PHP8 support
| None
|  
|  
| ??
| ??
| None
| 4.14 includes PHP8 support
|  
|  
| https://github.com/ezyang/htmlpurifier/<br />blob/v4.13.0/NEWS<br>PHP 8 support looks to be in progress but can't determine with confidence.
| https://github.com/ezyang/htmlpurifier/<br />blob/v4.13.0/NEWS<br />PHP 8 support looks to be in progress but can't determine with confidence.
| .../lib/htmlpurifier/
| http://www.htmlpurifier.org/
| LGPL v2.1+
|-
|-
| style="font-weight:bold;" | Javascript <br />templates
| style="font-weight:bold;" | Javascript <br />templates
| .../js/javascript-templates/
| https://github.com/blueimp/<br />[https://github.com/blueimp/JavaScript-Templates JavaScript-Templates]
| MIT License
| =3.19.0
| =3.19.0
| 3.20.0
| 3.20.0
| Inactive, 2020
| None
|  
|  
| n/a
| n/a
| None
| Inactive, 2020
|  
|  
|  
|  
| .../js/javascript-templates/
| https://github.com/blueimp/<br />[https://github.com/blueimp/JavaScript-Templates JavaScript-Templates]
| MIT License
|-
|-
| style="font-weight:bold;" | jQuery
| style="font-weight:bold;" | jQuery
| .../js/jquery/
| http://jquery.com/<br />https://github.com/jquery/jquery
| MIT License
| ^3.6.0
| ^3.6.0
| 3.6.0
| 3.6.0
| Yes 🚧
| n/a
| Minor
| Active
| Active
| Minor
|  
|  
| n/a
| Yes 🚧
| https://blog.jquery.com/2021/03/02/<br />jquery-3-6-0-released/<br />News: - QA: https://forum.jquery.com/<br />Twitter: https://twitter.com/jquery
| https://blog.jquery.com/2021/03/02/<br />jquery-3-6-0-released/<br />News: - QA: https://forum.jquery.com/<br />Twitter: https://twitter.com/jquery
| .../js/jquery/
| http://jquery.com/<br />https://github.com/jquery/jquery
| MIT License
|-
|-
| style="font-weight:bold;" | jQuery mobile
| style="font-weight:bold;" | jQuery mobile
| .../js/jquery/jquery-mobile/
| http://jquerymobile.com
| MIT License
| =1.5.0-alpha.1
| =1.5.0-alpha.1
| 1.5.0-rc1
| 1.5.0-rc1
| Inactive, 2017
| None
|  
|  
| n/a
| n/a
| None
| Inactive, 2017
|  
|  
| https://blog.jquerymobile.com <br />- lack of resources but wish to maintain.<br />❗Find out if we are still using this.
| https://blog.jquerymobile.com <br />- lack of resources but wish to maintain.<br />❗Find out if we are still using this.
| .../js/jquery/jquery-mobile/
| http://jquerymobile.com
| MIT License
|-
|-
| style="font-weight:bold;" | jQuery UI
| style="font-weight:bold;" | jQuery UI
| .../js/jquery/jquery-ui/
| http://jqueryui.com/
| MIT License
| =1.12.1
| =1.12.1
| 1.13.1
| 1.13.1
| Inactive, 2017
| None
|  
|  
| n/a
| n/a
| None
| Inactive, 2017
|  
|  
| https://blog.jqueryui.com/ <br />- lack of resources but with to maintain.
| https://blog.jqueryui.com/ <br />- lack of resources but with to maintain.
| .../js/jquery/jquery-ui/
| http://jqueryui.com/
| MIT License
|-
|-
| style="font-weight:bold;" | jQuery UI plugin <br />touch-punch
| style="font-weight:bold;" | jQuery UI plugin <br />touch-punch
| .../js/jquery/jquery-ui/<br />jquery-ui-touch-punch.min.js
| http://touchpunch.furf.com/<br />https://github.com/furf/jquery-ui-touch-punch
| MIT or GPL <br />Version 2 licenses
| =0.2.3
| =0.2.3
| 0.2.3
| 0.2.3
| Deprecated
| None
|  
|  
| n/a
| n/a
| None
| Deprecated
|  
|  
| ❗Do we still need it - is it merged into jquery
| ❗Do we still need it - is it merged into jquery
| .../js/jquery/jquery-ui/<br />jquery-ui-touch-punch.min.js
| http://touchpunch.furf.com/<br />https://github.com/furf/jquery-ui-touch-punch
| MIT or GPL <br />Version 2 licenses
|-
|-
| style="font-weight:bold;" | JS Color
| style="font-weight:bold;" | JS Color
| .../js/jscolor/
| http://jscolor.com/
| GPL 3
| ^2.4.5
| ^2.4.5
| 2.4.7
| 2.4.7
| Active
| None
|  
|  
| n/a
| n/a
| None
| Active
|  
|  
|  
|  
| .../js/jscolor/
| http://jscolor.com/
| GPL 3
|-
|-
| style="font-weight:bold;" | Json editor
| style="font-weight:bold;" | Json editor
| .../js/jsoneditor/
| https://github.com/json-editor/json-editor
| MIT License
| >=1.3.5
| >=1.3.5
| 2.6.1
| 2.6.1
|
| n/a
| Major 2.x
| Active
| Active
| Major 2.x
| 2.1.0: “fixed vulnerability in "http-server" package <br />(origin/feature/merges-20200227, feature/merges-20200227)
| n/a
|  
|  
| Leave for for 22.04
| Leave for for 22.04
| .../js/jsoneditor/
| https://github.com/json-editor/json-editor
| MIT License
|-
|-
| style="font-weight:bold;" | jTLine
| style="font-weight:bold;" | jTLine
| .../js/jTLine/
| https://naadydev.github.io/jTLine/
| MIT License
| =1.0
| =1.0
| 1.0
| 1.0
| Inactive, 2018
| None
|  
|  
| n/a
| n/a
| None
| Inactive, 2018
|  
|  
| https://twitter.com/naadydev
| https://twitter.com/naadydev
| .../js/jTLine/
| https://naadydev.github.io/jTLine/
| MIT License
|-
|-
| style="font-weight:bold;" | Lodash
| style="font-weight:bold;" | Lodash
| .../js/lodash/
| style="color:#333;" | ^4.17.15
| https://github.com/lodash/lodash
| MIT License
| style="color:#333333;" | ^4.17.15
| 4.17.21
| 4.17.21
| Active
| Patch fix
|  
|  
| n/a
| n/a
| Patch fix
| Active
|  
|  
| - Lodash was brought in with gridstack v0.5.0 <br />- Will be removed when gridstack 4+ gets merged.
| - Lodash was brought in with gridstack v0.5.0 <br />- Will be removed when gridstack 4+ gets merged.
| .../js/lodash/
| https://github.com/lodash/lodash
| MIT License
|-
|-
| style="font-weight:bold;" | Marked
| style="font-weight:bold;" | Marked
| .../js/marked/
| https://github.com/markedjs/marked
| MIT License
| ^2.1.3
| ^2.1.3
| 4.0.12
| 4.0.12
| Yes 🚧
| n/a
| Minor - v2.1.1, v2.1.2, v2.1.3<br />Major 3.x - breaking changes
| Active
| Active
| Minor - v2.1.1, v2.1.2, v2.1.3<br />Major 3.x - breaking changes
| 4.0.0 Major security fixes
| 4.0.0 Major security fixes
| n/a
| Yes 🚧
|  
|  
| .../js/marked/
| https://github.com/markedjs/marked
| MIT License
|-
|-
| style="font-weight:bold;" | Masonry
| style="font-weight:bold;" | Masonry
| .../js/masonry/
| https://masonry.desandro.com/<br />https://github.com/desandro/masonry
| MIT License
| =4.2.2
| =4.2.2
| 4.2.2
| 4.2.2
| Inactive, 2018
| None
|  
|  
| n/a
| n/a
| None
| Inactive, 2018
|  
|  
|  
|  
| .../js/masonry/
| https://masonry.desandro.com/<br />https://github.com/desandro/masonry
| MIT License
|-
|-
| style="font-weight:bold;" | TinyMCE<br />Mathslate
| style="font-weight:bold;" | TinyMCE<br />Mathslate
| .../js/tinymce/plugins/mathslate/
| https://github.com/dthies/tinymce4-mathslate
| GPL 3
| =1.1
| =1.1
| 1.1
| 1.1
| Forked version, 2015
| None
|  
|  
| n/a
| n/a
| None
| Forked version, 2015
|  
|  
| Our version is now forked to keep <br />make it work with Tinymce 5
| Our version is now forked to keep <br />make it work with Tinymce 5
| .../js/tinymce/plugins/mathslate/
| https://github.com/dthies/tinymce4-mathslate
| GPL 3
|-
|-
| style="font-weight:bold;" | Moment.js
| style="font-weight:bold;" | Moment.js
| .../js/momentjs/
| http://momentjs.com/
| MIT License
| ^2.29.1
| ^2.29.1
| 2.29.1
| 2.29.1
| Inactive, 2020
| None
|  
|  
| n/a
| n/a
| None
| Inactive, 2020
|  
|  
| Connected with jquery date-picker
| Connected with jquery date-picker
| .../js/momentjs/
| http://momentjs.com/
| MIT License
|-
|-
| style="font-weight:bold;" | Oauth PHP
| style="font-weight:bold;" | Oauth PHP
| .../webservice/libs/oauth-php/
| https://code.google.com/archive/p/oauth-php/
| MIT License
| =175
| =175
| 175
| 175
| Archived, 2010
| Replace
|  
|  
| No
| No
| Replace
| Archived, 2010
|  
|  
| We should replace with an oauth2 php library <br />https://oauth.net/code/php<br />checkout what Moodle does (old comment)
| We should replace with an oauth2 php library <br />https://oauth.net/code/php<br />checkout what Moodle does (old comment)
| .../webservice/libs/oauth-php/
| https://code.google.com/archive/p/oauth-php/
| MIT License
|-
|-
| style="font-weight:bold;" | PDFjs
| style="font-weight:bold;" | PDFjs
| .../artefact/file/blocktype/pdf/js/pdfjs/
| http://mozilla.github.io/pdf.js/<br />getting_started/#download<br />https://github.com/mozilla/pdf.js
| Apache License 2
| ^2.9.359
| ^2.9.359
| 2.12.313<br />
| 2.12.313<br />
| Yes 🚧
| n/a
| Minor
| Active
| Active
| Minor
|  
|  
| n/a
| Yes 🚧
|  
|  
| .../artefact/file/blocktype/pdf/js/pdfjs/
| http://mozilla.github.io/pdf.js/<br />getting_started/#download<br />https://github.com/mozilla/pdf.js
| Apache License 2
|-
|-
| style="font-weight:bold;" | PHPMailer
| style="font-weight:bold;" | PHPMailer
| .../lib/phpmailer/
| https://github.com/PHPMailer/PHPMailer
| LGPL
| ^6.5.1
| ^6.5.1
| 6.5.4
| 6.5.4
| Yes 🚧
| Yes
| Minor 6.5.0 - security release<br />Minor 6.5.1 - maintenance release<br />PHP8 support
| Active<br />
| Active<br />
| Minor 6.5.0 - security release<br />Minor 6.5.1 - maintenance release<br />PHP8 support
| Yes
| Yes
| Yes
| Yes 🚧
|  
|  
| .../lib/phpmailer/
| https://github.com/PHPMailer/PHPMailer
| LGPL
|-
|-
| style="font-weight:bold;" | Popper
| style="font-weight:bold;" | Popper
| .../lib/popper/
| https://popper.js.org/
| MIT License
| ^1.16.1 LTS
| ^1.16.1 LTS
| 2.11.2
| 2.11.2
| Active v2<br />LTS 1.16.1 <br />w/o warnings
| (Bootstrap 5 supports v2.x)<br />Major 2.x - breaking 2020 - 2.9.3<br />(bootstrap4) - Minor 1.16.1, Mar 2020 <br />Popper is now floating-ui, built ontop of popper, <br />different releases for core/react-native/react-dom
|  
|  
| n/a
| n/a
| (Bootstrap 5 supports v2.x)<br />Major 2.x - breaking 2020 - 2.9.3<br />(bootstrap4) - Minor 1.16.1, Mar 2020 <br />Popper is now floating-ui, built ontop of popper, <br />different releases for core/react-native/react-dom
| Active v2<br />LTS 1.16.1 <br />w/o warnings
|  
|  
| https://dev.to/fezvrasta/smarter-tooltips-and<br />-popovers-with-popper-2-44bh<br />
| https://dev.to/fezvrasta/smarter-tooltips-and<br />-popovers-with-popper-2-44bh<br />
| .../lib/popper/
| https://popper.js.org/
| MIT License
|-
|-
| style="font-weight:bold;" | ReCaptcha
| style="font-weight:bold;" | ReCaptcha
| .../lib/recaptcha/
| https://github.com/google/recaptcha
| BSD-3
| ^1.2.4
| ^1.2.4
| 1.2.4
| 1.2.4
| Yes 🚧
| In progress
| Patch
| Active
| Active
| Patch
|  
|  
| In progress
| This client supports both v2 and v3.<br />https://github.com/google/recaptcha/tree/php8-support
| Yes 🚧
| .../lib/recaptcha/
| This client supports both v2 and v3.<br>https://github.com/google/recaptcha/tree/php8-support
| https://github.com/google/recaptcha
| BSD-3
|-
|-
| style="font-weight:bold;" | simplesamlphp
| style="font-weight:bold;" | simplesamlphp
| ../auth/saml/extlib/simplesamlphp/
| https://github.com/simplesamlphp/<br />[https://github.com/simplesamlphp/simplesamlphp simplesamlphp]
| GPL 2.1
| ^1.18.7
| ^1.18.7
| 1.19.5
| 1.19.5
| Active
|  
|  
| Yes 8.1
|  
|  
| Yes 8.1
| Active
|  
|  
| /htdocs/auth/saml/extlib/ <br />- Make a README.Mahara file<br>PHP 8 coming in v2.x. [https://github.com/simplesamlphp/simplesamlphp/issues/1521#issuecomment-917600539 Sounds like it should work on 1.19.1 though].
| /htdocs/auth/saml/extlib/ <br />- Make a README.Mahara file<br />PHP 8 coming in v2.x. [https://github.com/simplesamlphp/simplesamlphp/issues/1521#issuecomment-917600539 Sounds like it should work on 1.19.1 though].
| ../auth/saml/extlib/simplesamlphp/
| https://github.com/simplesamlphp/<br />[https://github.com/simplesamlphp/simplesamlphp simplesamlphp]
| GPL 2.1
|-
|-
| style="font-weight:bold;" | Select2
| style="font-weight:bold;" | Select2
| .../js/select2/
| https://select2.org/
| MIT License
| ^4.0.13
| ^4.0.13
| 4.0.13
| 4.0.13
| Yes 🚧
| n/a
| Patch
| Active
| Active
| Patch
|  
|  
| n/a
| Yes 🚧
|  
|  
| .../js/select2/
| https://select2.org/
| MIT License
|-
|-
| style="font-weight:bold;" | Aurulent Sans <br />(font)
| style="font-weight:bold;" | Aurulent Sans <br />(font)
| .../lib/fonts/
| http://www.fontsquirrel.com/fonts/<br />Aurulent-Sans
| SIL OFL v1.10
| ^2007.05.04
| ^2007.05.04
| 2007.05.04
| 2007.05.04
| Unknown
| None
|  
|  
| n/a
| n/a
| None
| Unknown
|  
|  
|  
|  
| .../lib/fonts/
| http://www.fontsquirrel.com/fonts/<br />Aurulent-Sans
| SIL OFL v1.10
|-
|-
| style="font-weight:bold;" | Deja Vu Sans <br />(font)
| style="font-weight:bold;" | Deja Vu Sans <br />(font)
| .../lib/fonts/
| http://www.fontsquirrel.com/fonts/<br />DejaVu-Sans
| DejaVu Fonts <br />License v1.00
| ^2.37
| ^2.37
| 2.37
| 2.37
| Yes 🚧
| n/a
| Patch
| Unknown
| Unknown
| Patch
|  
|  
| n/a
| Yes 🚧
|  
|  
| .../lib/fonts/
| http://www.fontsquirrel.com/fonts/<br />DejaVu-Sans
| DejaVu Fonts <br />License v1.00
|-
|-
| style="font-weight:bold;" | Open Sans <br />(font)
| style="font-weight:bold;" | Open Sans <br />(font)
| .../theme/raw/fonts/
| https://www.google.com/fonts/<br />specimen/Open+Sans
| Apache License <br />version 2.0
| ^1.10
| ^1.10
| 1.10
| 1.10
| Unknown
| None
|  
|  
| n/a
| n/a
| None
| Unknown
|  
|  
|  
|  
| .../theme/raw/fonts/
| https://www.google.com/fonts/<br />specimen/Open+Sans
| Apache License <br />version 2.0
|-
|-
| style="font-weight:bold;" | Roboto Slab <br />(font)
| style="font-weight:bold;" | Roboto Slab <br />(font)
| .../theme/raw/fonts/
| https://www.google.com/fonts/<br />specimen/Roboto+Slab
| MIT License
| ^1.9
| ^1.9
| 1.100263
| 1.100263
| Yes 🚧
| n/a
| Minor
| Unknown
| Unknown
| Minor
|  
|  
| n/a
| Yes 🚧
|  
|  
| .../theme/raw/fonts/
| https://www.google.com/fonts/<br />specimen/Roboto+Slab
| MIT License
|-
|-
| style="font-weight:bold;" | Fontawesome
| style="font-weight:bold;" | Fontawesome
| .../theme/raw/sass/lib/font-awesome/
| http://fontawesome.io<br />https://github.com/FortAwesome/Font-Awesome
| SIL OFL 1.1
| ^5.8.1
| ^5.8.1
| 6.0.0
| 6.0.0
| Yes 🚧
| n/a
| Minor
| Active
| Active
| Minor
|  
|  
| n/a
| Yes 🚧
| https://github.com/FortAwesome/Font-Awesome<br />/blob/master/UPGRADING.md
| https://github.com/FortAwesome/Font-Awesome<br />/blob/master/UPGRADING.md
| .../theme/raw/sass/lib/font-awesome/
| http://fontawesome.io<br />https://github.com/FortAwesome/Font-Awesome
| SIL OFL 1.1
|-
|-
| style="font-weight:bold;" | Ghostscript <br />fonts
| style="font-weight:bold;" | Ghostscript <br />fonts
| .../theme/raw/fonts/
| - http://sourceforge.net/projects/gs-fonts/<br />- https://www.ghostscript.com/releases.html
| AGPL
| ^8.11
| ^8.11
| 9.54.0
| 9.54.0
| Active
| Major
|  
|  
| n/a
| n/a
| Major
| Active
|  
|  
| ❗What do we use it for?
| ❗What do we use it for?
| .../theme/raw/fonts/
| - http://sourceforge.net/projects/gs-fonts/<br />- https://www.ghostscript.com/releases.html
| AGPL
|-
|-
| style="font-weight:bold;" | Charis SIL <br />(fonts)
| style="font-weight:bold;" | Charis SIL <br />(fonts)
| .././lib/fonts/
| - http://scripts.sil.org/cms/scripts/page.php<br />?item_id=CharisSIL<br />- https://software.sil.org/charis/download/
| SIL OFL
| ^5.000
| ^5.000
| 6.001
| 6.001
| Active
| Major
|  
|  
| n/a
| n/a
| Major
| Active
|  
|  
|  
|  
| .././lib/fonts/
| - http://scripts.sil.org/cms/scripts/page.php<br />?item_id=CharisSIL<br />- https://software.sil.org/charis/download/
| SIL OFL
|-
|-
| style="font-weight:bold;" | TinyMCE
| style="font-weight:bold;" | TinyMCE
| .../js/tinymce/
| https://www.tiny.cloud/<br />https://www.tiny.cloud/get-tiny/self-hosted
| LGPL 2.1
| ^5.8.2
| ^5.8.2
| 5.9+
| 5.9+
| Yes 🚧
| n/a
| Major security patch - XSS
| Active
| Active
| Major security patch - XSS
| Yes
| Yes
| n/a
| Yes 🚧
| https://www.tiny.cloud/docs/changelog/<br />📲 Test on mobile when updating<br />https://www.tiny.cloud/blog/category/<br />news-and-updates/
| https://www.tiny.cloud/docs/changelog/<br />📲 Test on mobile when updating<br />https://www.tiny.cloud/blog/category/<br />news-and-updates/
| .../js/tinymce/
| https://www.tiny.cloud/<br />https://www.tiny.cloud/get-tiny/self-hosted
| LGPL 2.1
|-
|-
| style="font-weight:bold;" | Video.js
| style="font-weight:bold;" | Video.js
| .../artefact/file/blocktype/<br />internalmedia/videojs/
| http://videojs.com/<br />https://github.com/videojs/video.js
| Apache License 2.0
| ^7.14.3
| ^7.14.3
| 7.18.0
| 7.18.0
| Yes🚧
| n/a
| Minor
| Active
| Active
| Minor
|  
|  
| n/a
| Yes🚧
|  
|  
| .../artefact/file/blocktype/<br />internalmedia/videojs/
| http://videojs.com/<br />https://github.com/videojs/video.js
| Apache License 2.0
|-
|-
| style="font-weight:bold;" | zxcvbn
| style="font-weight:bold;" | zxcvbn
| .../js/zxcvbn/
| https://github.com/dropbox/zxcvbn
| MIT License
| =4.4.2
| =4.4.2
| 4.4.2
| 4.4.2
| Inactive, 2017
| None
|  
|  
| n/a
| n/a
| None
| Inactive, 2017
|  
|  
|  
|  
| .../js/zxcvbn/
| https://github.com/dropbox/zxcvbn
| MIT License
|-
|-
| style="font-weight:bold;" | composer.json<br />dependencies<br />
| style="font-weight:bold;" | composer.json<br />dependencies<br />
| https://git.mahara.org<br />/mahara/mahara/-/blob/<br />master/external/composer.json
| Check for updates in the .json file.
|  
|  
|  
|  
Line 682: Line 630:
|  
|  
|  
|  
| https://git.mahara.org<br />/mahara/mahara/-/blob/<br />master/external/composer.json
| Check for updates in the .json file.
|  
|  
|}
|}

Revision as of 15:27, 23 February 2022

A list of the third party plugins within Mahara.

A helpful way to update this list is to go:

 find ./htdocs -type f -iname "README.Mahara" -exec grep 'Version' -B1 {} \; -print

on the current codebase.

Note: another thing to keep in sync is the country names we use for 'Country' dropdowns. To check what the current state of play is

 perl -MLocale::Country -le 'print join("\n", sort map { country2code($_) . " => " . country2code($_, LOCALE_CODE_ALPHA_3) . ", // " . $_ } all_country_names())'

and check the results against htdocs/lib/country.php and htdocs/lang/en.utf8/mahara.php files For any confusion you can also check against https://www.iso.org

Legend

  • PHP8 = is the latest version of this plugin compatible with PHP8?
  • Upgrades = what upgrades are available for this plugin?
  • Security = is there a new security patch available?
  • 22.04 column: Yes = updating to the latest version according to SemVer in 'Mahara Version' column
  • SemVer Info
  • Inactive: Maintained but not actively making releases
  • Deprecated: All maintainers have left and site may not exist in extreme cases.
  • 🚧: In progress/there is a working patch in gerrit

Last edited 23 Feb 2022

Name Mahara
version
Latest
version
21.10 PHP8 Upgrades Support Security Notes README.Mahara
(./htdocs/...)
URL License
ADODB ^5.21.1
5.22.0 Yes 🚧 Yes 8.1 Security - 5.21.4
- pgsql: authentication bypass in connect
functions (CVE-2021-3850)
End 5.20.20 Yes News: https://twitter.com/ADOdb_announce first.
Wishlist: extract our $SESSION
php 8.0 ready.
.../lib/adodb/ - https://adodb.org/dokuwiki/doku.php
- https://github.com/ADOdb/ADOdb
BSD 3-Clause
LGPL
Bootstrap ~4.6.0 5.1.3 n/a Major e.g. 5.1.2 Updated JS Sanitizer to add
sms in the SAFE_URL_PATTERN
Ends 4.x (LTS)
- 01 Nov 2022
.../lib/bootstrap/assets/javascripts/
- https://getbootstrap.com/
- https://github.com/twbs/release
MIT License
Bootstrap
Datetimepicker
=4.17.47 6.0.0-beta2 n/a None Inactive,
v4 not maintained
No longer requires Bootstrap
runs using bootstrap and moment.js
There is a version 5 but not finished.
.../js/bootstrap-datetimepicker/ https://getdatepicker.com/
https://github.com/tempusdominus/
bootstrap-4
MIT License
Chart.js ^2.9.4 3.7.1 n/a Major - 3.0.0 breaking changes
https://www.chartjs.org/docs/next/
getting-started/v3-migration
LTS 2.x: 2.9.4
Active 3.x
? .../js/chartjs/ http://www.chartjs.org MIT License
Clipboard js ^2.0.8 2.0.10 Yes 🚧 n/a Patch fix Active .../js/clipboard/ https://clipboardjs.com/ MIT License
Cookie
consent
=3.1.1 4.0 n/a None New updates are
proprietary.
Site talks about versions 2021.6 and 2021.2.3
which are not available on GitHub.
💡Check if we should keep using this - licences.
.../js/cookieconsent/ - https://www.osano.com/cookieconsent
- https://github.com/osano/cookieconsent
MIT License
CSS Tidy ~1.7.3 2.0.1 No 2.0.1 released 22 Feb 2022
PHP8 compatible
Inactive, 2020 No activity on the repo in the last year. .../lib/csstidy/ https://github.com/Cerdic/CSSTidy LGPL
Dragon-drop ^3.2.1 3.6.1
n/a None
Pre-release minor
changelog not available.
Active 3.6.1 in the making but in pre-release stages. ..../js/dragondrop/ https://github.com/schne324/dragon-drop MIT License
Datatables ^1.10.20 1.11.4 Yes 🚧 n/a Patch fix Active
https://datatables.net/
https://datatables.net/download/index
MIT License
Dropzone ^5.7.6 5.9.3/6.0.0-beta.2 Yes 🚧 n/a Minor Active
Dropping IE support after 5.9.3
.../js/dropzone/ https://github.com/dropzone/dropzone/releases MIT License
Dwoo =1.3.7 1.3.7 No Replace Deprecated
.../lib/dwoo/ http://dwoo.org/
https://github.com/dwoo-project/dwoo
LGPL
Elastic Search >6.1.0 7.17.0 No WIP - Gold Active
PHP 8 has a milestone. .../lib/elasticsearch/ https://github.com/elastic/elasticsearch-php Apache v2.0
LGPL v2.1
fancybox3 ~3.5.6 4.0.26 Yes 🚧 n/a Patch fix Inactive
- v3 deprecated
- v4 in beta stage
https://fancyapps.com/next/
Notifications: https://twitter.com/thefancyapps
.../js/fancybox/ https://github.com/fancyapps/ui - in BETA stage
https://fancyapps.com/docs/ui/installation
CC BY-SA 4.0
gridstack >0.6.4 5.0.0 n/a WIP - Robert
Active https://gridstackjs.com .../js/gridstack/ https://github.com/gridstack/gridstack.js MIT License
HTML Purifier =4.13.0 4.14.0 ?? None 4.14 includes PHP8 support https://github.com/ezyang/htmlpurifier/
blob/v4.13.0/NEWS
PHP 8 support looks to be in progress but can't determine with confidence.
.../lib/htmlpurifier/ http://www.htmlpurifier.org/ LGPL v2.1+
Javascript
templates
=3.19.0 3.20.0 n/a None Inactive, 2020 .../js/javascript-templates/ https://github.com/blueimp/
JavaScript-Templates
MIT License
jQuery ^3.6.0 3.6.0 Yes 🚧 n/a Minor Active https://blog.jquery.com/2021/03/02/
jquery-3-6-0-released/
News: - QA: https://forum.jquery.com/
Twitter: https://twitter.com/jquery
.../js/jquery/ http://jquery.com/
https://github.com/jquery/jquery
MIT License
jQuery mobile =1.5.0-alpha.1 1.5.0-rc1 n/a None Inactive, 2017 https://blog.jquerymobile.com
- lack of resources but wish to maintain.
❗Find out if we are still using this.
.../js/jquery/jquery-mobile/ http://jquerymobile.com MIT License
jQuery UI =1.12.1 1.13.1 n/a None Inactive, 2017 https://blog.jqueryui.com/
- lack of resources but with to maintain.
.../js/jquery/jquery-ui/ http://jqueryui.com/ MIT License
jQuery UI plugin
touch-punch
=0.2.3 0.2.3 n/a None Deprecated ❗Do we still need it - is it merged into jquery .../js/jquery/jquery-ui/
jquery-ui-touch-punch.min.js
http://touchpunch.furf.com/
https://github.com/furf/jquery-ui-touch-punch
MIT or GPL
Version 2 licenses
JS Color ^2.4.5 2.4.7 n/a None Active .../js/jscolor/ http://jscolor.com/ GPL 3
Json editor >=1.3.5 2.6.1 n/a Major 2.x Active Leave for for 22.04 .../js/jsoneditor/ https://github.com/json-editor/json-editor MIT License
jTLine =1.0 1.0 n/a None Inactive, 2018 https://twitter.com/naadydev .../js/jTLine/ https://naadydev.github.io/jTLine/ MIT License
Lodash ^4.17.15 4.17.21 n/a Patch fix Active - Lodash was brought in with gridstack v0.5.0
- Will be removed when gridstack 4+ gets merged.
.../js/lodash/ https://github.com/lodash/lodash MIT License
Marked ^2.1.3 4.0.12 Yes 🚧 n/a Minor - v2.1.1, v2.1.2, v2.1.3
Major 3.x - breaking changes
Active 4.0.0 Major security fixes .../js/marked/ https://github.com/markedjs/marked MIT License
Masonry =4.2.2 4.2.2 n/a None Inactive, 2018 .../js/masonry/ https://masonry.desandro.com/
https://github.com/desandro/masonry
MIT License
TinyMCE
Mathslate
=1.1 1.1 n/a None Forked version, 2015 Our version is now forked to keep
make it work with Tinymce 5
.../js/tinymce/plugins/mathslate/ https://github.com/dthies/tinymce4-mathslate GPL 3
Moment.js ^2.29.1 2.29.1 n/a None Inactive, 2020 Connected with jquery date-picker .../js/momentjs/ http://momentjs.com/ MIT License
Oauth PHP =175 175 No Replace Archived, 2010 We should replace with an oauth2 php library
https://oauth.net/code/php
checkout what Moodle does (old comment)
.../webservice/libs/oauth-php/ https://code.google.com/archive/p/oauth-php/ MIT License
PDFjs ^2.9.359 2.12.313
Yes 🚧 n/a Minor Active .../artefact/file/blocktype/pdf/js/pdfjs/ http://mozilla.github.io/pdf.js/
getting_started/#download
https://github.com/mozilla/pdf.js
Apache License 2
PHPMailer ^6.5.1 6.5.4 Yes 🚧 Yes Minor 6.5.0 - security release
Minor 6.5.1 - maintenance release
PHP8 support
Active
Yes .../lib/phpmailer/ https://github.com/PHPMailer/PHPMailer LGPL
Popper ^1.16.1 LTS 2.11.2 n/a (Bootstrap 5 supports v2.x)
Major 2.x - breaking 2020 - 2.9.3
(bootstrap4) - Minor 1.16.1, Mar 2020
Popper is now floating-ui, built ontop of popper,
different releases for core/react-native/react-dom
Active v2
LTS 1.16.1
w/o warnings
https://dev.to/fezvrasta/smarter-tooltips-and
-popovers-with-popper-2-44bh
.../lib/popper/ https://popper.js.org/ MIT License
ReCaptcha ^1.2.4 1.2.4 Yes 🚧 In progress Patch Active This client supports both v2 and v3.
https://github.com/google/recaptcha/tree/php8-support
.../lib/recaptcha/ https://github.com/google/recaptcha BSD-3
simplesamlphp ^1.18.7 1.19.5 Yes 8.1 Active /htdocs/auth/saml/extlib/
- Make a README.Mahara file
PHP 8 coming in v2.x. Sounds like it should work on 1.19.1 though.
../auth/saml/extlib/simplesamlphp/ https://github.com/simplesamlphp/
simplesamlphp
GPL 2.1
Select2 ^4.0.13 4.0.13 Yes 🚧 n/a Patch Active .../js/select2/ https://select2.org/ MIT License
Aurulent Sans
(font)
^2007.05.04 2007.05.04 n/a None Unknown .../lib/fonts/ http://www.fontsquirrel.com/fonts/
Aurulent-Sans
SIL OFL v1.10
Deja Vu Sans
(font)
^2.37 2.37 Yes 🚧 n/a Patch Unknown .../lib/fonts/ http://www.fontsquirrel.com/fonts/
DejaVu-Sans
DejaVu Fonts
License v1.00
Open Sans
(font)
^1.10 1.10 n/a None Unknown .../theme/raw/fonts/ https://www.google.com/fonts/
specimen/Open+Sans
Apache License
version 2.0
Roboto Slab
(font)
^1.9 1.100263 Yes 🚧 n/a Minor Unknown .../theme/raw/fonts/ https://www.google.com/fonts/
specimen/Roboto+Slab
MIT License
Fontawesome ^5.8.1 6.0.0 Yes 🚧 n/a Minor Active https://github.com/FortAwesome/Font-Awesome
/blob/master/UPGRADING.md
.../theme/raw/sass/lib/font-awesome/ http://fontawesome.io
https://github.com/FortAwesome/Font-Awesome
SIL OFL 1.1
Ghostscript
fonts
^8.11 9.54.0 n/a Major Active ❗What do we use it for? .../theme/raw/fonts/ - http://sourceforge.net/projects/gs-fonts/
- https://www.ghostscript.com/releases.html
AGPL
Charis SIL
(fonts)
^5.000 6.001 n/a Major Active .././lib/fonts/ - http://scripts.sil.org/cms/scripts/page.php
?item_id=CharisSIL
- https://software.sil.org/charis/download/
SIL OFL
TinyMCE ^5.8.2 5.9+ Yes 🚧 n/a Major security patch - XSS Active Yes https://www.tiny.cloud/docs/changelog/
📲 Test on mobile when updating
https://www.tiny.cloud/blog/category/
news-and-updates/
.../js/tinymce/ https://www.tiny.cloud/
https://www.tiny.cloud/get-tiny/self-hosted
LGPL 2.1
Video.js ^7.14.3 7.18.0 Yes🚧 n/a Minor Active .../artefact/file/blocktype/
internalmedia/videojs/
http://videojs.com/
https://github.com/videojs/video.js
Apache License 2.0
zxcvbn =4.4.2 4.4.2 n/a None Inactive, 2017 .../js/zxcvbn/ https://github.com/dropbox/zxcvbn MIT License
composer.json
dependencies
https://git.mahara.org
/mahara/mahara/-/blob/
master/external/composer.json
Check for updates in the .json file.