Actions

Difference between revisions of "Developer Area/Plugins/Third party"

From Mahara Wiki

< Developer Area‎ | Plugins
 
(75 intermediate revisions by the same user not shown)
Line 1: Line 1:
 
A list of the third-party plugins within Mahara.
 
A list of the third-party plugins within Mahara.
  
A helpful way to update this list is to go:
+
=== Composer commands ===
 +
For available versions, e.g.  <code>composer show phpro/grumphp-shim 1.14.* --all</code>
 +
 
 +
For our composer dependencies:  <code>composer show  --tree</code>
 +
 
 +
For checking the dependencies of a library version, e.g. <code>composer show elasticsearch/elasticsearch 7.17.* --tree</code>
 +
 
 +
Check if there are any outdated libraries (according to the [[SemVer Info|version syntax]] in <code>composer.json</code>)  <code>composer outdated</code>
 +
 
 +
=== Checking the <code>.Mahara</code> files ===
 +
To check the versions in the <code>.Mahara</code> files, a helpful way to update this list is to go:
 
   <code>find ./htdocs -type f -iname "README.Mahara" -exec grep 'Version' -B1 {} \; -print</code>
 
   <code>find ./htdocs -type f -iname "README.Mahara" -exec grep 'Version' -B1 {} \; -print</code>
 
... on the current codebase.
 
... on the current codebase.
  
Note: another thing to keep in sync is the country names we use for 'Country' dropdowns. To check what the current state of play is
+
=== Syncing the list in 'Country' dropdowns ===
 +
To keep in sync is the country names we use for 'Country' dropdowns. To check what the current state of play is
 
  <code>perl -MLocale::Country -le 'print join("\n", sort map { country2code($_) . " => " . country2code($_, LOCALE_CODE_ALPHA_3) . ", // " . $_ } all_country_names())'</code>
 
  <code>perl -MLocale::Country -le 'print join("\n", sort map { country2code($_) . " => " . country2code($_, LOCALE_CODE_ALPHA_3) . ", // " . $_ } all_country_names())'</code>
 
and check the results against <code>htdocs/lib/country.php</code> and <code>htdocs/lang/en.utf8/mahara.php</code> files
 
and check the results against <code>htdocs/lib/country.php</code> and <code>htdocs/lang/en.utf8/mahara.php</code> files
 +
 
For any confusion you can also check against https://www.iso.org
 
For any confusion you can also check against https://www.iso.org
  
====Legend====
+
== Third-party libraries (PHP and JS) ==
  
*'''PHP8''' = is the latest version of this plugin compatible with PHP8?
+
=== Legend ===
*'''Upgrades''' = what upgrades are available for this plugin?
+
*'''Mahara version''' = the <code>README.Mahara</code> file for the library | [https://nodejs.dev/learn/semantic-versioning-using-npm SemVer Info] - explaining the symbols in the Mahara version column
*'''Support''' = notes on end of support | Active | Inactive | Deprecated (officially)
+
*'''Latest version''' = the most recent available version
*'''Security''' = is there a new security patch available?
+
*'''Update type''' = what upgrades are available for this plugin, i.e. major, minor, patch, or security?
*'''22.04''' = Will this need to be updated for this version?
+
*'''Support''' = Is there a community supporting this library? When was the last release year if not in active support
*[https://nodejs.dev/learn/semantic-versioning-using-npm SemVer Info] - explaining the symbols in the Mahara version column
+
**Active: There is ongoing work being put into the library
*Inactive: Maintained but not actively making releases
+
**Inactive: Maintained but not actively making releases
*Deprecated: All maintainers have left and site may not exist in extreme cases.
+
**Archived: Not being maintained
*🚧: In progress/there is a working patch in Gerrit
+
**Deprecated (officially): All maintainers have left, and site may not exist in extreme cases.
 +
*'''License''' = software license for the library
 +
*'''Notes''' = extra information, e.g. resources, notes, and new
 +
*'''Composer''' = check if the library is managed by Composer
 +
*'''NPM''' = check if the library is managed by NPM
 +
'''PHP versions in support''' https://www.php.net/supported-versions.php<nowiki/>⁣ – 14 LTS - Ends security support in 30 Apr 2023, go to 16 LTS soon
  
 +
💡 A new idea is being proposed to better handle customisations on updating third party libraries lives here → https://reviews.mahara.org/c/mahara/+/13780
 +
 +
=== PHP libraries (excluding external) ===
 +
https://eusonlito.github.io/php-changes-cheatsheet/deprecated.html
 +
 +
Libraries are managed by Composer. See <code>composer.json</code>
 +
 +
Run <code>composer show</code> to get a quick summary of library versions managed by Composer.
 +
 +
Run <code>composer outdated</code> to get a list of outdated libraries.
 +
 +
🟡 Libraries yet to be moved to Composer: SimpleSAMLPHP - currently lives in <code>htdocs/auth/saml/extlib</code> and the version is managed in Makefile by curl.
 
{| class="wikitable sortable" style="vertical-align:middle;"
 
{| class="wikitable sortable" style="vertical-align:middle;"
 
|- style="font-weight:bold; text-align:center;"
 
|- style="font-weight:bold; text-align:center;"
 
!'''Name'''
 
!'''Name'''
 
!'''Mahara <br />version'''
 
!'''Mahara <br />version'''
!'''Latest<br />version<br />'''
+
!'''Update type'''
!'''22.10'''
 
!'''PHP8'''
 
!'''Upgrades/Updates'''
 
 
!'''Support'''
 
!'''Support'''
!'''Security'''
+
!'''License'''
!'''README.Mahara <br />(./htdocs/...)'''
 
 
!'''URL/Notes'''
 
!'''URL/Notes'''
!'''License'''
+
!'''Composer'''
 
|-
 
|-
| style="font-weight:bold;" |ADODB
+
| style="font-weight:bold;" |'''ADODB'''
|5.22.0
+
|5.22.6
|5.22.3
+
|Up to date
|🚧
 
|Yes 8.1
 
| style="color:#333;" |Patch
 
-remove support for legacy SQL drivers
 
 
 
-PHP 8 support
 
 
|Active
 
|Active
|No
 
|.../lib/adodb/
 
|  - [https://adodb.org/dokuwiki/doku.php Official site]<br />- [https://github.com/ADOdb/ADOdb GitHub]
 
- [https://twitter.com/ADOdb_announce Twitter]
 
 
<br />Wish-list: [https://bugs.launchpad.net/mahara/+bug/1945264 extract $SESSION]
 
 
|BSD 3-Clause<br />LGPL
 
|BSD 3-Clause<br />LGPL
 +
|[https://adodb.org/dokuwiki/doku.php Official site]<nowiki> | </nowiki>[https://github.com/ADOdb/ADOdb GitHub]<nowiki> |  </nowiki>[https://twitter.com/ADOdb_announce Twitter]<br />Wish-list: [https://bugs.launchpad.net/mahara/+bug/1945264 extract $SESSION]
 +
|✅
 +
|-
 +
| style="font-weight:bold;" |'''CSS Tidy'''
 +
|2.1.0
 +
|Up to date
 +
|Active
 +
|LGPL
 +
|[https://github.com/Cerdic/CSSTidy GitHub]
 +
|✅
 
|-
 
|-
| style="font-weight:bold;" |Bootstrap
+
| style="font-weight:bold;" |'''Elasticsearch PHP'''
|5.0.1
+
| style="color:#333;" |7.17.2
|5.2.2
+
|Major, 8.10.0
|
+
|Active
|n/a
+
|Apache v2.0  LGPL v2.1
|Minor
+
|[https://github.com/elastic/elasticsearch-php GitHub]<nowiki> | </nowiki>[https://github.com/elastic/elasticsearch-php/blob/master/CHANGELOG.md Changelog]
|Active LTS
+
Move to OpenSearch
|No
 
|.../lib/bootstrap/assets/javascripts/<br />
 
| - [https://github.com/twbs/release GitHub releases]
 
- [https://github.com/twbs/bootstrap GitHub project]
 
  
- [https://getbootstrap.com/docs/versions/ bootstrap versions]
+
|
|MIT License
 
 
|-
 
|-
| style="font-weight:bold;" |BS Datetime
+
| style="font-weight:bold;" |'''HTML Purifier'''
picker
+
|4.16.0
|=4.17.47
+
|Up to date
|6.2.4
+
|2022
|
+
|LGPL v2.1+
|n/a
+
|[http://www.htmlpurifier.org/ HTML Purifier]<nowiki> | </nowiki>[https://github.com/ezyang/htmlpurifier/ GitHub]
|Major (beta)
+
|
Rewrite
 
|Active - 6
 
Inactive - 4
 
|N/A
 
|.../js/bootstrap-datetimepicker/
 
|<nowiki>- </nowiki>[https://getdatepicker.com/ GitHub]<br />[https://getdatepicker.com/6/change-log.html https://getdatepicker.com/]
 
|MIT License
 
 
|-
 
|-
| style="font-weight:bold;" |Chart.js
+
| style="font-weight:bold;" |'''PHPMailer'''
|3.7.1
+
|6.8.1
|3.9.1
+
|Up to date
|🚧
 
|n/a
 
|Minor
 
 
|Active
 
|Active
|No
+
|LGPL
|.../js/chartjs/
+
|[https://github.com/PHPMailer/PHPMailer GitHub]
| - http://www.chartjs.org
+
|
- [https://github.com/chartjs/Chart.js GitHub]
 
|MIT License
 
 
|-
 
|-
| style="font-weight:bold;" |Clipboard js 🌸
+
| style="font-weight:bold;" |'''ReCaptcha'''
|^2.0.8
+
|1.2.4
|2.0.10
+
|Minor, 1.3.0
|🚧
 
|n/a
 
|Patch fix
 
 
|Active
 
|Active
|
+
|BSD-3
|.../js/clipboard/
+
|[https://github.com/google/recaptcha GitHub]
|[https://clipboardjs.com/ ClipboardJS]
+
|
[https://github.com/zenorocha/clipboard.js GitHub]
 
|MIT License
 
 
|-
 
|-
| style="font-weight:bold;" |Cookie <br />consent
+
| style="font-weight:bold;" |'''simplesamlphp'''
|=3.1.1
+
|2.0.4
|4.0
+
|Minor, 2.0.6
|
+
|Active
|n/a
+
|GPL 2.1
|None
+
|[https://github.com/simplesamlphp/simplesamlphp GitHub]
|New updates are<br />proprietary.
+
Optional library - called in Makefile
|
+
|
|.../js/cookieconsent/
+
|}
| - [https://www.osano.com/cookieconsent Osano site]<br />- [https://github.com/osano/cookieconsent GitHub]
+
 
 +
=== JavaScript and jQuery libraries ===
 +
🟡 '''Check that our Node version is still in support''' https://endoflife.date/nodejs  node| https://nodejs.org/en/download/releases/ ➡ Update the <code>.nvmrc</code> file with the supported version.
 +
 
 +
Run <code>npm list</code> to get a quick list of the versions and libraries managed by NPM
  
 +
Goal: to move libraries to be managed by NPM
  
Site talks about versions 2021.6 and 2021.2.3 <br />which are not available on GitHub.<br />💡Check if we should keep using this - licences.
+
==== NPM-managed JS libraries ====
|MIT License
+
{| class="wikitable sortable" style="vertical-align:middle;"
 +
|- style="font-weight:bold; text-align:center;"
 +
!'''Name'''
 +
!'''Mahara <br />version'''
 +
!'''Update type'''
 +
!'''Support'''
 +
!'''License'''
 +
!'''Notes'''
 
|-
 
|-
| style="font-weight:bold;" |CSS Tidy
+
| style="font-weight:bold;" |'''yargs'''
|~1.7.3
+
|5.0.2
|2.0.1
+
|Minor, 5.3.2
|🚧
+
|Active
|Yes
+
|MIT
|2.0.1 released 22 Feb 2022<br />PHP8 compatible
 
 
|
 
|
 +
|-
 +
| style="font-weight:bold;" |'''Chart.js'''
 +
|3.9.1
 +
|Major, 4.4.0
 +
|Active
 +
|MIT
 +
|[https://www.chartjs.org/docs/latest/migration/v4-migration.html Migration to v4]
 +
|-
 +
| style="font-weight:bold;" |'''Clipboard js'''
 +
|2.0.11
 +
|Up to date
 +
|Active
 +
|MIT
 +
|version # is tagged
 +
|-
 +
| style="font-weight:bold;" |'''Dragon-drop'''
 +
|3.6.1
 +
|Up to date
 +
|2020
 +
|MIT
 
|
 
|
|.../lib/csstidy/
 
|[https://github.com/Cerdic/CSSTidy GitHub]
 
|LGPL
 
 
|-
 
|-
| style="font-weight:bold;" |Dragon-drop
+
| style="font-weight:bold;" |'''Dropzone'''
|^3.2.1
+
|5.9.3
|3.2.1
+
|Patch, 5.9.3
 +
|2021
 +
|MIT
 
|
 
|
|n/a
+
|-
|None<br />Pre-release minor <br />changelog not available.
+
| style="font-weight:bold;" |'''jQuery'''
 +
|3.7.1
 +
|Up to date
 +
|Active
 +
|MIT
 +
|[https://forum.jquery.com/ Forum]
 +
|-
 +
| style="font-weight:bold;" |'''jQuery UI'''
 +
|1.13.2
 +
|Up to date
 
|Active
 
|Active
 +
|MIT
 
|
 
|
|..../js/dragondrop/
 
|[https://github.com/schne324/dragon-drop GitHub]
 
3.6.1 in the making but in pre-release stages.
 
|MIT License
 
 
|-
 
|-
| style="font-weight:bold;" |Datatables
+
| style="font-weight:bold;" |'''JS Color'''
|^1.10.20
+
|2.5.1
|1.11.4
+
|Up to date
|🚧
+
|Inactive,2022
|n/a
+
|GPL 3
|Patch fix
 
|Active<br />
 
 
|
 
|
|.../js/DataTables/
 
|https://datatables.net/<br />[https://datatables.net/download/index Download]<br />
 
|MIT License
 
 
|-
 
|-
| style="font-weight:bold;" |Dropzone
+
| style="font-weight:bold;" |'''Marked'''
|^5.7.6
+
|4.3.0
|5.9.3
+
|Minor, 4.3.0
|🚧
+
Major 9.1.0
|n/a
 
|Minor
 
 
|Active
 
|Active
 +
|MIT
 
|
 
|
|.../js/dropzone/
 
|[https://github.com/dropzone/dropzone/releases GitHub releases]
 
 
 
6.0.0 in beta
 
|MIT License
 
 
|-
 
|-
| style="font-weight:bold;" |Dwoo
+
| style="font-weight:bold;" |'''Moment.js'''
|=1.3.7
+
|2.29.4
|1.3.7
+
|Up to date
|
+
|Active
|No
+
|MIT
|Replace
+
|[http://momentjs.com/ Moment JS] 🆕 [https://moment.github.io/luxon/#/ Luxon GitHub]
|Deprecated<br />
+
|-
|
+
| style="font-weight:bold;" |'''Popper'''
|.../lib/dwoo/
+
|2.11.8
|http://dwoo.org/<br />[https://github.com/dwoo-project/dwoo GitHub project]
+
|Up to date
|LGPL
+
|Active
 +
|MIT
 +
|[https://github.com/twbs/bootstrap/issues/31451 GitHub issue]<nowiki> | </nowiki>[https://dev.to/fezvrasta/smarter-tooltips-and&#x20;-popovers-with-popper-2-44bh tooltips]
 +
'''Floating UI'''
 +
|-
 +
| style="font-weight:bold;" |'''Fontawesome'''
 +
|6.4.2
 +
|Up to date
 +
|Active
 +
|SIL OFL 1.1
 +
|[https://fontawesome.com/docs/web/setup/upgrade/ Upgrade steps]<nowiki> | </nowiki>[https://fontawesome.com/docs/changelog/ Changelog]
 +
|-
 +
| style="font-weight:bold;" |'''TinyMCE'''
 +
|5.10.7
 +
|Major, 6.7.0
 +
|Active
 +
|LGPL 2.1
 +
|[https://www.tiny.cloud/get-tiny/self-hosted Downloads]<nowiki> | </nowiki>[https://www.tiny.cloud/docs/changelog/ Changelog]  
 +
📲 Test mobile
 
|-
 
|-
| style="font-weight:bold;" |Elastic Search
+
| style="font-weight:bold;" |'''Video.js'''
| style="color:#333;" |>6.1.0
+
|7.21.5
|7.17.0
+
|Major, 8.5.2
|
+
|Active
|No
+
|Apache License 2.0
|WIP - Gold
+
|[http://videojs.com/ Video JS]
|Active<br />
+
|}
|
 
|.../lib/elasticsearch/
 
|[https://github.com/elastic/elasticsearch-php GitHub]
 
  
 
+
==== Manually managed JS libraries ====
PHP 8 has a [https://github.com/elastic/elasticsearch-php/milestone/6 milestone].
+
{| class="wikitable sortable" style="vertical-align:middle;"
|Apache v2.0 <br />LGPL v2.1
+
|- style="font-weight:bold; text-align:center;"
 +
!'''Name'''
 +
!'''Mahara <br />version'''
 +
!'''Update type'''
 +
!'''Support'''
 +
!'''Location<br />'''<code><small>(./htdocs/...)</small></code>
 +
!'''License'''
 +
!'''Notes'''
 +
!'''NPM'''
 
|-
 
|-
| style="font-weight:bold;" |fancybox3
+
| style="font-weight:bold;" |'''Date time'''
|3.5.7
+
'''picker'''
|4.0.26
+
|4.17.47
|
+
|Major 6.17.16
|n/a
+
|Active - v6
|Removed from Mahara 11/2021
+
|<small>.../js/bootstrap-datetimepicker/</small>
|Inactive<br />- v3 deprecated<br />- v4 in beta stage
+
|MIT
|
+
|[https://getdatepicker.com/6/change-log.html Changelog]
|.../js/fancybox/
 
| - [https://github.com/fancyapps/ui GitHub] - in BETA stage<br />- [https://fancyapps.com/docs/ui/installation Installation]<br />- [https://fancyapps.com/next/ Official site]<br />- [https://twitter.com/thefancyapps Twitter]
 
  
 
+
Latest release: rewrite (beta)
Only exists in branch versions 20.10, 21.04, 21.10<br />Only backport security fixes
+
|
|CC BY-SA 4.0
 
 
|-
 
|-
| style="font-weight:bold;" |gridstack
+
| style="font-weight:bold;" |'''Datatables'''
|>0.6.4
+
|1.11.4
|5.0.0
+
|Minor
|
 
|n/a
 
|WIP - Robert<br />
 
 
|Active
 
|Active
|
+
|<small>.../js/DataTables/</small>
|.../js/gridstack/
+
|MIT
| - [https://github.com/gridstack/gridstack.js GitHub]
+
|[https://datatables.net/download/index Download]
- [https://gridstackjs.com Website]
+
[https://cdn.datatables.net/ Release notes CDN]
|MIT License
+
|❌ Need to use web builder
 
|-
 
|-
| style="font-weight:bold;" |HTML Purifier
+
| style="font-weight:bold;" |'''Gridstack'''
|=4.13.0
+
|4.4.1
|4.14.0
+
|Major
|🚧
+
|Active
|Yes
+
|<small>.../js/gridstack/</small>
|None
+
|MIT
|
+
|[Demos](<nowiki>https://gridstackjs.com/demo/</nowiki>)
|
 
|.../lib/htmlpurifier/
 
|http://www.htmlpurifier.org/
 
[https://github.com/ezyang/htmlpurifier/ GitHub]
 
  
  
4.14 includes PHP8 support
+
https://github.com/gridstack/gridstack.js/tree/master/doc
|LGPL v2.1+
 
|-
 
| style="font-weight:bold;" |Javascript <br />templates
 
|=3.19.0
 
|3.20.0
 
 
|🚧
 
|🚧
|n/a
 
|Minor
 
|Archived, 2021
 
|
 
|.../js/javascript-templates/
 
|https://github.com/blueimp/<br />[https://github.com/blueimp/JavaScript-Templates JavaScript-Templates]
 
|MIT License
 
 
|-
 
|-
| style="font-weight:bold;" |jQuery
+
| style="font-weight:bold;" |'''Json editor'''
|^3.6.0
+
|2.6.1
|3.6.0
 
|
 
|n/a
 
 
|Minor
 
|Minor
 
|Active
 
|Active
|
+
|<small>.../js/jsoneditor/</small>
|.../js/jquery/
+
|MIT
|http://jquery.com/<br />[https://github.com/jquery/jquery GitHub]
+
|[https://github.com/json-editor/json-editor/blob/master/CHANGELOG.md Changelog]
 
+
|🚧
 
 
https://blog.jquery.com/2021/03/02/<br />jquery-3-6-0-released/<br />News: - QA: https://forum.jquery.com/<br />Twitter: https://twitter.com/jquery
 
|MIT License
 
 
|-
 
|-
| style="font-weight:bold;" |jQuery mobile
+
| style="font-weight:bold;" |'''PDFjs'''
|=1.5.0-alpha.1
+
|3.10.111
|1.5.0-rc1
+
|Minor 🚧
|
+
|Active
|n/a
+
|<small>.../artefact/file/blocktype/pdf/js/pdfjs/</small>
|None
+
|Apache License 2
|Inactive, 2017
+
|[http://mozilla.github.io/pdf.js/getting_started/#download Getting started]
|
+
The Firefox dist version different to NPM package
|.../js/jquery/jquery-mobile/
+
|❌
|http://jquerymobile.com
+
|}
  
 
+
=== Forked/stale/deprecated libraries ===
https://blog.jquerymobile.com <br />- lack of resources but wish to maintain.<br />❗Find out if we are still using this.
+
{| class="wikitable sortable mw-collapsible mw-collapsed" style="vertical-align:middle;"
|MIT License
+
|- style="font-weight:bold; text-align:center;"
 +
!'''Name'''
 +
!'''Mahara <br />version'''
 +
!'''Latest<br />version'''
 +
!'''Support'''
 +
!'''Location<br />'''<code><small>(./htdocs/...)</small></code>
 +
!'''License'''
 +
!'''URL'''
 +
!'''Next action'''
 
|-
 
|-
| style="font-weight:bold;" |jQuery UI
+
| style="font-weight:bold;" |'''Dwoo'''
|1.13.1
+
|1.3.7
|1.13.1
+
|1.3.7
|🚧
+
|'''Archived, 2020'''
|n/a
+
|<small>.../lib/dwoo/</small>
|In maintenance state<br />Only security and compatibility fixes
+
|LGPL
|
+
|[http://dwoo.org/ Dead site?]
 +
[https://github.com/dwoo-project/dwoo GitHub]
 
|
 
|
|.../js/jquery/jquery-ui/
 
|http://jqueryui.com/
 
 
 
https://blog.jqueryui.com/2022/01/jquery-ui-1-13-1-released/
 
|MIT License
 
 
|-
 
|-
| style="font-weight:bold;" |jQuery UI plugin <br />touch-punch
+
| style="font-weight:bold;" |'''Javascript <br />templates'''
|=0.2.3
+
|3.20.0
|0.2.3
+
|3.20.0
|
+
|'''Archived, 2021'''
|n/a
+
|<small>.../js/javascript-templates/</small>
|None
+
|MIT
|Deprecated
+
|[https://github.com/blueimp/JavaScript-Templates GitHub]
 
|
 
|
|.../js/jquery/jquery-ui/<br />jquery-ui-touch-punch.min.js
 
|http://touchpunch.furf.com/<br />[https://github.com/furf/jquery-ui-touch-punch GitHub]
 
 
 
❗Do we still need it - is it merged into jquery
 
|MIT or GPL <br />Version 2 licenses
 
 
|-
 
|-
| style="font-weight:bold;" |JS Color
+
| style="font-weight:bold;" |'''jQuery mobile'''
|2.4.7
+
|1.5.0-alpha.1
|2.4.7
+
|1.5.0-rc1
|🚧
+
|'''Deprecated'''
|n/a
+
|<small>.../js/jquery/jquery-mobile/</small>
|None
+
|MIT
|Active
+
|[http://jquerymobile.com Website] <br /><small>🚨 ''"transition(ed) ...''</small> <small>''under the jQuery project umbrella, jQuery UI"''</small>
|
+
|Remove and test
|.../js/jscolor/
 
|http://jscolor.com/
 
|GPL 3
 
 
|-
 
|-
| style="font-weight:bold;" |Json editor
+
| style="font-weight:bold;" |'''jQuery UI plugin <br />touch-punch'''
|>=1.3.5
+
|0.2.3
|2.6.1
+
|0.2.3
|
+
|'''Deprecated'''
|n/a
+
|<small>.../js/jquery/jquery-ui/<br />jquery-ui-touch-punch.min.js</small>
|Major 2.x
+
|MIT or GPL <br />Version 2
|Active
+
|[https://github.com/furf/jquery-ui-touch-punch GitHub]
|
 
|.../js/jsoneditor/
 
|[https://github.com/json-editor/json-editor GitHub]
 
  
 
+
<small>🚨 external to JQuery UI</small>
- Patch started, including child patch with Mahara customisations: https://bugs.launchpad.net/mahara/+bug/1962219
+
|[https://github.com/RWAP/jquery-ui-touch-punch Use a fork?]
 
 
- Issue with select field dropdowns in SmartEvidence editor: possibly related to select2 plugin - leave for 22.10
 
|MIT License
 
 
|-
 
|-
| style="font-weight:bold;" |jTLine
+
| style="font-weight:bold;" |'''jTLine'''
|=1.0
 
 
|1.0
 
|1.0
|
+
|1.0
|n/a
+
|'''Inactive, 2018'''
|None
+
|<small>.../js/jTLine/</small>
|Inactive, 2018
+
|MIT
|
 
|.../js/jTLine/
 
 
|[https://naadydev.github.io/jTLine/ GitHub]
 
|[https://naadydev.github.io/jTLine/ GitHub]
 
[https://twitter.com/naadydev Twitter]
 
[https://twitter.com/naadydev Twitter]
|MIT License
+
 
|-
+
[https://codyhouse.co/gem/horizontal-timeline Ref]
| style="font-weight:bold;" |Lodash
 
| style="color:#333;" |^4.17.15
 
|4.17.21
 
 
|
 
|
|n/a
 
|Patch fix
 
|Active
 
|
 
|.../js/lodash/
 
|[https://github.com/lodash/lodash GitHub]
 
 
 
- Lodash was brought in with gridstack v0.5.0 <br />- Will be removed when gridstack 4+ gets merged.
 
|MIT License
 
 
|-
 
|-
| style="font-weight:bold;" |Marked
+
| style="font-weight:bold;" |'''Masonry'''
|^2.1.3
+
|4.2.2
|4.0.12
 
|🚧
 
|n/a
 
|Minor - v2.1.1, v2.1.2, v2.1.3<br />Major 3.x - breaking changes<br />4.0.0 Major security fixes
 
|Active
 
|Yes
 
|.../js/marked/
 
|[https://github.com/markedjs/marked GitHub]
 
|MIT License
 
|-
 
| style="font-weight:bold;" |Masonry
 
|=4.2.2
 
 
|4.2.2
 
|4.2.2
 +
|'''Inactive, 2018'''
 +
|<small>.../js/masonry/</small>
 +
|MIT
 +
|[https://masonry.desandro.com/ Masonry]
 +
[https://github.com/desandro/masonry GitHub]
 
|
 
|
|n/a
 
|None
 
|Inactive, 2018
 
|
 
|.../js/masonry/
 
|[https://masonry.desandro.com/ Masonry]<br />[https://github.com/desandro/masonry GitHub]
 
|MIT License
 
 
|-
 
|-
| style="font-weight:bold;" |TinyMCE<br />Mathslate
+
| style="font-weight:bold;" |'''TinyMCE<br />Mathslate'''
 
|1.1
 
|1.1
 
|1.1
 
|1.1
|🚧
+
|'''Forked, 2015'''
|n/a
+
|<small>.../js/tinymce/plugins/mathslate/</small>
|None
 
|Forked version, 2015
 
|
 
|.../js/tinymce/plugins/mathslate/
 
|[https://github.com/dthies/tinymce4-mathslate GitHub]
 
 
 
 
 
Our version is now forked to keep <br />make it work with Tinymce 5
 
 
|GPL 3
 
|GPL 3
|-
+
|<small>Our version is [[GitHub|forked]].<br />to work with Tinymce 5</small>
| style="font-weight:bold;" |Moment.js
 
|^2.29.1
 
|2.29.1
 
 
|
 
|
|n/a
 
|None
 
|Inactive, 2020
 
|
 
|.../js/momentjs/
 
|http://momentjs.com/
 
 
 
Succeeded by Luxon: https://moment.github.io/luxon/#/
 
 
Connected with jquery date-picker
 
|MIT License
 
 
|-
 
|-
| style="font-weight:bold;" |Oauth PHP
+
| style="font-weight:bold;" |'''Oauth PHP'''
|=175
 
 
|175
 
|175
|
+
|175
|No
+
|'''Archived, 2010'''
|Replace
+
|<small>.../webservice/libs/oauth-php/</small>
|Archived, 2010
+
|MIT
|
+
|[https://code.google.com/archive/p/oauth-php/ Code]
|.../webservice/libs/oauth-php/
+
|<small>Replace with an</small> <small>[https://oauth.net/code/php oauth2 php library] see what Moodle does (old comment)</small>
|https://code.google.com/archive/p/oauth-php/
 
 
 
 
 
We should replace with an oauth2 php library <br />https://oauth.net/code/php<br />checkout what Moodle does (old comment)
 
|MIT License
 
 
|-
 
|-
| style="font-weight:bold;" |PDFjs
+
| style="font-weight:bold;" |'''zxcvbn'''
|^2.9.359
+
|4.4.2
|2.12.313<br />
+
|4.4.2
|🚧
+
|'''Inactive, 2017'''
|n/a
+
|<small>.../js/zxcvbn/</small>
|Minor
+
|MIT
|Active
+
|[https://github.com/dropbox/zxcvbn GitHub]
 
|
 
|
|.../artefact/file/blocktype/pdf/js/pdfjs/
 
|[http://mozilla.github.io/pdf.js/getting_started/#download Getting started]<br />[https://github.com/mozilla/pdf.js GitHub]
 
|Apache License 2
 
 
|-
 
|-
| style="font-weight:bold;" |PHPMailer
+
|'''Cookie consent'''
|^6.5.1
+
|3.1.1
|6.5.4
+
|4.0
|🚧
+
|'''No open source updates'''
|Yes
+
|<small>.../js/cookieconsent/</small>
|Minor 6.5.0 - security release<br />Minor 6.5.1 - maintenance release<br />PHP8 support
+
|MIT
|Active<br />
+
|[https://www.osano.com/cookieconsent Download] [https://github.com/osano/cookieconsent GitHub]
|Yes
 
|.../lib/phpmailer/
 
|[https://github.com/PHPMailer/PHPMailer GitHub]
 
|LGPL
 
|-
 
| style="font-weight:bold;" |Popper
 
|^1.16.1 LTS
 
|2.11.2
 
|
 
|n/a
 
|Major 2.x upgrade is available, but Bootstrap 5 is required for v2.x, so on hold until we have Bootstrap 5 (should be in by 22.10)
 
|Active v2<br />LTS 1.16.1 <br />w/o warnings
 
|
 
|.../js/popper/
 
|https://popper.js.org/
 
 
 
 
 
https://github.com/twbs/bootstrap/issues/31451
 
 
 
  
https://dev.to/fezvrasta/smarter-tooltips-and<br />-popovers-with-popper-2-44bh<br />
+
<small>Open source version is not updated. 🚨</small>
|MIT License
 
|-
 
| style="font-weight:bold;" |ReCaptcha
 
|^1.2.4
 
|1.2.4
 
 
|
 
|
|In progress
 
|Patch
 
|Active
 
|
 
|.../lib/recaptcha/
 
|[https://github.com/google/recaptcha GitHub]
 
This client supports both v2 and v3.<br />https://github.com/google/recaptcha/tree/php8-support
 
|BSD-3
 
 
|-
 
|-
| style="font-weight:bold;" |simplesamlphp
+
|'''Select2'''
|^1.18.7
+
|4.0.13
|1.19.5
+
|4.0.13
|🚧
+
|'''Inactive, 2020'''
|Yes 8.1
+
|<small>.../js/select2/</small>
 +
|MIT
 +
|[https://select2.org/ Select2]<nowiki> | </nowiki>[https://github.com/select2/select2/releases Releases]
 +
RC 4.1
 
|
 
|
|Active
+
|}
|
 
|../auth/saml/extlib/simplesamlphp/
 
|[https://github.com/simplesamlphp/simplesamlphp GitHub]
 
  
 
+
=== Fonts ===
/htdocs/auth/saml/extlib/ <br />- Make a README.Mahara file<br />PHP 8 coming in v2.x. [https://github.com/simplesamlphp/simplesamlphp/issues/1521#issuecomment-917600539 Sounds like it should work on 1.19.1 though].
+
{| class="wikitable sortable" style="vertical-align:middle;"
|GPL 2.1
+
!'''Name'''
 +
!'''Mahara <br />version'''
 +
!'''Latest<br />version'''
 +
!'''Status'''
 +
!'''README location<br />'''<code>(./htdocs/...)</code>
 +
!'''License'''
 +
!'''URL/Notes'''
 
|-
 
|-
| style="font-weight:bold;" |Select2
+
| style="font-weight:bold;" |'''Aurulent Sans <br />(font)'''
|^4.0.13
+
|2007.05.04
|4.0.13
 
|
 
|n/a
 
|Patch
 
|Active
 
|
 
|.../js/select2/
 
|https://select2.org/
 
|MIT License
 
|-
 
| style="font-weight:bold;" |Aurulent Sans <br />(font)
 
|^2007.05.04
 
 
|2007.05.04
 
|2007.05.04
|
 
 
|n/a
 
|n/a
|None
+
|<small>.../lib/fonts/</small>
|Unknown
 
|
 
|.../lib/fonts/
 
|http://www.fontsquirrel.com/fonts/<br />Aurulent-Sans
 
 
|SIL OFL v1.10
 
|SIL OFL v1.10
 +
|[https://www.fontsquirrel.com/fonts/aurulent-sans Font Squirrel Aurulent Sans]
 
|-
 
|-
| style="font-weight:bold;" |Deja Vu Sans <br />(font)
+
| style="font-weight:bold;" |'''Deja Vu Sans <br />(font)'''
|^2.37
+
|2.37
 
|2.37
 
|2.37
|
 
 
|n/a
 
|n/a
|Patch
+
|<small>.../lib/fonts/</small>
|Unknown
+
|DejaVu Fonts
|
+
|[http://www.fontsquirrel.com/fonts/DejaVu-Sans Font Squirrel Deja Vu Sans]
|.../lib/fonts/
 
|[http://www.fontsquirrel.com/fonts/DejaVu-Sans Font Squirrel]<br />
 
|DejaVu Fonts <br />License v1.00
 
 
|-
 
|-
| style="font-weight:bold;" |Open Sans <br />(font)
+
| style="font-weight:bold;" |'''Open Sans <br />(font)'''
|^1.10
+
|1.10
 
|1.10
 
|1.10
|
 
|n/a
 
|None
 
 
|Unknown
 
|Unknown
|
+
|<small>.../theme/raw/fonts/</small>
|.../theme/raw/fonts/
+
|Apache License
|https://www.google.com/fonts/<br />specimen/Open+Sans
+
|[https://www.google.com/fonts/specimen/Open+Sans Google Fonts Open Sans]
|Apache License <br />version 2.0
 
 
|-
 
|-
| style="font-weight:bold;" |Roboto Slab <br />(font)
+
| style="font-weight:bold;" |'''Roboto Slab <br />(font)'''
|^1.9
+
|1.100263
 
|1.100263
 
|1.100263
|
 
|n/a
 
|Minor
 
 
|Unknown
 
|Unknown
|
+
|<small>.../theme/raw/fonts/</small>
|.../theme/raw/fonts/
+
|MIT
|https://www.google.com/fonts/<br />specimen/Roboto+Slab
+
|[https://www.google.com/fonts/specimen/Roboto+Slab Google Fonts Roboto]
|MIT License
 
 
|-
 
|-
| style="font-weight:bold;" |Fontawesome
+
|'''Charis SIL <br />(fonts)'''
|^5.8.1
+
|6.001
|6.0.0
 
|
 
|n/a
 
|Major 6.0.0
 
|Active
 
|
 
|.../theme/raw/sass/lib/font-awesome/
 
|http://fontawesome.io<br />[https://github.com/FortAwesome/Font-Awesome GitHub]
 
 
 
 
 
[https://reviews.mahara.org/#/c/12463/ Patch in progress] (on hold for 22.10)
 
 
 
[https://fontawesome.com/docs/web/setup/upgrade/ Upgrade steps]
 
|SIL OFL 1.1
 
|-
 
| style="font-weight:bold;" |Ghostscript <br />fonts
 
|^8.11
 
|9.54.0
 
|
 
|n/a
 
|Major
 
|Active
 
|
 
|.../theme/raw/fonts/
 
|  - [[sourceforge:projects/gs-fonts/|SourceForge release]]<br />[https://www.ghostscript.com/releases.html Releases]
 
 
 
 
 
❗What do we use it for?
 
|AGPL
 
|-
 
| style="font-weight:bold;" |Charis SIL <br />(fonts)
 
|^5.000
 
 
|6.001
 
|6.001
|
 
|n/a
 
|Major
 
 
|Active
 
|Active
|
+
|<small>.././lib/fonts/</small>
|.././lib/fonts/
 
| - http://scripts.sil.org/cms/scripts/page.php<br />?item_id=CharisSIL<br />- https://software.sil.org/charis/download/
 
 
|SIL OFL
 
|SIL OFL
|-
+
|[http://scripts.sil.org/cms/scripts/page.php?item_id=CharisSIL About font]<nowiki> | </nowiki>[https://software.sil.org/charis/download/ Download]
| style="font-weight:bold;" |TinyMCE
+
|}
|5.10.2
 
|5.10.2
 
|🚧
 
|n/a
 
|Major security patch - XSS
 
|Active
 
|Yes
 
|.../js/tinymce/
 
|https://www.tiny.cloud/<br />https://www.tiny.cloud/get-tiny/self-hosted
 
 
 
 
 
[https://www.tiny.cloud/docs/changelog/ Changelog]<br />📲 Test on mobile when updating<br />[https://www.tiny.cloud/blog/category/news-and-updates/ News and updates]<br />
 
|LGPL 2.1
 
|-
 
| style="font-weight:bold;" |Video.js
 
|7.17.0
 
|7.17.0
 
|🚧
 
|n/a
 
|
 
|Active
 
|
 
|.../artefact/file/blocktype/<br />internalmedia/videojs/
 
|http://videojs.com/<br />[https://github.com/videojs/video.js GitHub]
 
  
 +
=== Composer.json dependencies ===
 +
'''Resources:''' https://git.mahara.org | <code>/mahara/mahara/-/blob/</code> | <code>mahara/external/composer.json</code>
  
Pre-released 7.18.1 Feb 2022
+
'''Run''' <code>composer outdated</code> to check for updates.
|Apache License 2.0
 
|-
 
| style="font-weight:bold;" |zxcvbn
 
|=4.4.2
 
|4.4.2
 
|
 
|n/a
 
|None
 
|Inactive, 2017
 
|
 
|.../js/zxcvbn/
 
|https://github.com/dropbox/zxcvbn
 
|MIT License
 
|-
 
| style="font-weight:bold;" |composer.json<br />dependencies<br />
 
|
 
|
 
|
 
|
 
|
 
|
 
|
 
|https://git.mahara.org<br />/mahara/mahara/-/blob/<br />master/external/composer.json
 
|Check for updates in the .json file.
 
|
 
|}
 

Latest revision as of 15:18, 4 January 2024

A list of the third-party plugins within Mahara.

Composer commands

For available versions, e.g. composer show phpro/grumphp-shim 1.14.* --all

For our composer dependencies: composer show --tree

For checking the dependencies of a library version, e.g. composer show elasticsearch/elasticsearch 7.17.* --tree

Check if there are any outdated libraries (according to the version syntax in composer.json) composer outdated

Checking the .Mahara files

To check the versions in the .Mahara files, a helpful way to update this list is to go:

 find ./htdocs -type f -iname "README.Mahara" -exec grep 'Version' -B1 {} \; -print

... on the current codebase.

Syncing the list in 'Country' dropdowns

To keep in sync is the country names we use for 'Country' dropdowns. To check what the current state of play is

perl -MLocale::Country -le 'print join("\n", sort map { country2code($_) . " => " . country2code($_, LOCALE_CODE_ALPHA_3) . ", // " . $_ } all_country_names())'

and check the results against htdocs/lib/country.php and htdocs/lang/en.utf8/mahara.php files

For any confusion you can also check against https://www.iso.org

Third-party libraries (PHP and JS)

Legend

  • Mahara version = the README.Mahara file for the library | SemVer Info - explaining the symbols in the Mahara version column
  • Latest version = the most recent available version
  • Update type = what upgrades are available for this plugin, i.e. major, minor, patch, or security?
  • Support = Is there a community supporting this library? When was the last release year if not in active support
    • Active: There is ongoing work being put into the library
    • Inactive: Maintained but not actively making releases
    • Archived: Not being maintained
    • Deprecated (officially): All maintainers have left, and site may not exist in extreme cases.
  • License = software license for the library
  • Notes = extra information, e.g. resources, notes, and new
  • Composer = check if the library is managed by Composer
  • NPM = check if the library is managed by NPM

PHP versions in support https://www.php.net/supported-versions.php⁣ – 14 LTS - Ends security support in 30 Apr 2023, go to 16 LTS soon

💡 A new idea is being proposed to better handle customisations on updating third party libraries lives here → https://reviews.mahara.org/c/mahara/+/13780

PHP libraries (excluding external)

https://eusonlito.github.io/php-changes-cheatsheet/deprecated.html

Libraries are managed by Composer. See composer.json

Run composer show to get a quick summary of library versions managed by Composer.

Run composer outdated to get a list of outdated libraries.

🟡 Libraries yet to be moved to Composer: SimpleSAMLPHP - currently lives in htdocs/auth/saml/extlib and the version is managed in Makefile by curl.

Name Mahara
version
Update type Support License URL/Notes Composer
ADODB 5.22.6 Up to date Active BSD 3-Clause
LGPL
Official site | GitHub | Twitter
Wish-list: extract $SESSION
CSS Tidy 2.1.0 Up to date Active LGPL GitHub
Elasticsearch PHP 7.17.2 Major, 8.10.0 Active Apache v2.0 LGPL v2.1 GitHub | Changelog

Move to OpenSearch

HTML Purifier 4.16.0 Up to date 2022 LGPL v2.1+ HTML Purifier | GitHub
PHPMailer 6.8.1 Up to date Active LGPL GitHub
ReCaptcha 1.2.4 Minor, 1.3.0 Active BSD-3 GitHub
simplesamlphp 2.0.4 Minor, 2.0.6 Active GPL 2.1 GitHub

Optional library - called in Makefile

JavaScript and jQuery libraries

🟡 Check that our Node version is still in support https://endoflife.date/nodejs node| https://nodejs.org/en/download/releases/ ➡ Update the .nvmrc file with the supported version.

Run npm list to get a quick list of the versions and libraries managed by NPM

Goal: to move libraries to be managed by NPM

NPM-managed JS libraries

Name Mahara
version
Update type Support License Notes
yargs 5.0.2 Minor, 5.3.2 Active MIT
Chart.js 3.9.1 Major, 4.4.0 Active MIT Migration to v4
Clipboard js 2.0.11 Up to date Active MIT version # is tagged
Dragon-drop 3.6.1 Up to date 2020 MIT
Dropzone 5.9.3 Patch, 5.9.3 2021 MIT
jQuery 3.7.1 Up to date Active MIT Forum
jQuery UI 1.13.2 Up to date Active MIT
JS Color 2.5.1 Up to date Inactive,2022 GPL 3
Marked 4.3.0 Minor, 4.3.0

Major 9.1.0

Active MIT
Moment.js 2.29.4 Up to date Active MIT Moment JS 🆕 Luxon GitHub
Popper 2.11.8 Up to date Active MIT GitHub issue | tooltips

Floating UI

Fontawesome 6.4.2 Up to date Active SIL OFL 1.1 Upgrade steps | Changelog
TinyMCE 5.10.7 Major, 6.7.0 Active LGPL 2.1 Downloads | Changelog

📲 Test mobile

Video.js 7.21.5 Major, 8.5.2 Active Apache License 2.0 Video JS

Manually managed JS libraries

Name Mahara
version
Update type Support Location
(./htdocs/...)
License Notes NPM
Date time

picker

4.17.47 Major 6.17.16 Active - v6 .../js/bootstrap-datetimepicker/ MIT Changelog

Latest release: rewrite (beta)

Datatables 1.11.4 Minor Active .../js/DataTables/ MIT Download

Release notes CDN

❌ Need to use web builder
Gridstack 4.4.1 Major Active .../js/gridstack/ MIT [Demos](https://gridstackjs.com/demo/)


https://github.com/gridstack/gridstack.js/tree/master/doc

🚧
Json editor 2.6.1 Minor Active .../js/jsoneditor/ MIT Changelog 🚧
PDFjs 3.10.111 Minor 🚧 Active .../artefact/file/blocktype/pdf/js/pdfjs/ Apache License 2 Getting started

The Firefox dist version different to NPM package

Forked/stale/deprecated libraries

Name Mahara
version
Latest
version
Support Location
(./htdocs/...)
License URL Next action
Dwoo 1.3.7 1.3.7 Archived, 2020 .../lib/dwoo/ LGPL Dead site?

GitHub

Javascript
templates
3.20.0 3.20.0 Archived, 2021 .../js/javascript-templates/ MIT GitHub
jQuery mobile 1.5.0-alpha.1 1.5.0-rc1 Deprecated .../js/jquery/jquery-mobile/ MIT Website
🚨 "transition(ed) ... under the jQuery project umbrella, jQuery UI"
Remove and test
jQuery UI plugin
touch-punch
0.2.3 0.2.3 Deprecated .../js/jquery/jquery-ui/
jquery-ui-touch-punch.min.js
MIT or GPL
Version 2
GitHub

🚨 external to JQuery UI

Use a fork?
jTLine 1.0 1.0 Inactive, 2018 .../js/jTLine/ MIT GitHub

Twitter

Ref

Masonry 4.2.2 4.2.2 Inactive, 2018 .../js/masonry/ MIT Masonry

GitHub

TinyMCE
Mathslate
1.1 1.1 Forked, 2015 .../js/tinymce/plugins/mathslate/ GPL 3 Our version is forked.
to work with Tinymce 5
Oauth PHP 175 175 Archived, 2010 .../webservice/libs/oauth-php/ MIT Code Replace with an oauth2 php library see what Moodle does (old comment)
zxcvbn 4.4.2 4.4.2 Inactive, 2017 .../js/zxcvbn/ MIT GitHub
Cookie consent 3.1.1 4.0 No open source updates .../js/cookieconsent/ MIT Download GitHub

Open source version is not updated. 🚨

Select2 4.0.13 4.0.13 Inactive, 2020 .../js/select2/ MIT Select2 | Releases

RC 4.1

Fonts

Name Mahara
version
Latest
version
Status README location
(./htdocs/...)
License URL/Notes
Aurulent Sans
(font)
2007.05.04 2007.05.04 n/a .../lib/fonts/ SIL OFL v1.10 Font Squirrel Aurulent Sans
Deja Vu Sans
(font)
2.37 2.37 n/a .../lib/fonts/ DejaVu Fonts Font Squirrel Deja Vu Sans
Open Sans
(font)
1.10 1.10 Unknown .../theme/raw/fonts/ Apache License Google Fonts Open Sans
Roboto Slab
(font)
1.100263 1.100263 Unknown .../theme/raw/fonts/ MIT Google Fonts Roboto
Charis SIL
(fonts)
6.001 6.001 Active .././lib/fonts/ SIL OFL About font | Download

Composer.json dependencies

Resources: https://git.mahara.org | /mahara/mahara/-/blob/ | mahara/external/composer.json

Run composer outdated to check for updates.