Actions

Difference between revisions of "Developer Area/Plugins/Third party"

From Mahara Wiki

< Developer Area‎ | Plugins
m
 
(143 intermediate revisions by 4 users not shown)
Line 3: Line 3:
 
A helpful way to update this list is to go:
 
A helpful way to update this list is to go:
 
   find ./htdocs -type f -iname "README.Mahara" -exec grep 'Version' -B1 {} \; -print
 
   find ./htdocs -type f -iname "README.Mahara" -exec grep 'Version' -B1 {} \; -print
 +
on the current codebase.
  
On the current codebase
+
Note: another thing to keep in sync is the country names we use for 'Country' dropdowns. To check what the current state of play is
 +
  perl -MLocale::Country -le 'print join("\n", sort map { country2code($_) . " => " . country2code($_, LOCALE_CODE_ALPHA_3) . ", // " . $_ } all_country_names())'
 +
and check the results against htdocs/lib/country.php and htdocs/lang/en.utf8/mahara.php files
 +
For any confusion you can also check against https://www.iso.org
  
 
Indicating what version they are on in Mahara and what they currently are on at time of publishing 09 Jan 2019:
 
Indicating what version they are on in Mahara and what they currently are on at time of publishing 09 Jan 2019:
 +
 +
Current versions marked in <span style="color:red">Red</span> indicate the plugin needs updating/upgrading.
  
 
{| class=wikitable
 
{| class=wikitable
 
|-
 
|-
! Name !! Readme file !! URL !! License !! Current version !! Latest version !! Latest branch version !! Requirements of latest version !! Note
+
! Name !! Readme file !! URL !! License !! Current version !! Latest version !! Latest branch version !! Requirements of latest version !! Note !! Estimated upgrade time  !! Notifications
 +
|-
 +
| ADODB || ./htdocs/lib/adodb/README.mahara || http://adodb.org/ || Dual-licensed under the BSD and Lesser GPL license, with the BSD License having priority. || 5.20.16 || 5.20.17 ||   ||  || We need to update to version 5.21 for PHP 7.4 compatibility, but this has not been released as at July 2020 (Bug 1859528) The current roadmap is that issues related to PHP 7.3 and higher will only be fixed in ADOdb version 5.21+.  || Investigation needed, we could possibly want to go to 5.20.17 || ADOB release all news on current releases + important bug fixes on https://twitter.com/ADOdb_announce first.
 +
|-
 +
| Bootstrap || ./htdocs/lib/bootstrap/README.Mahara || https://getbootstrap.com/  || MIT License || 4.3.1 || 4.5.0  || Dependencies: Updated jQuery to v3.5.1 ||  || There have been 2 minor point releases since we upgraded || Investigation needed (Liam?) || Bootstrap has an RSS feed: https://blog.getbootstrap.com/feed.xml <br/>and a twitter account: https://twitter.com/getbootstrap
 +
|-
 +
| Bootstrap Datetimepicker || ./htdocs/js/bootstrap-datetimepicker/README.mahara || https://eonasdan.github.io/bootstrap-datetimepicker/  || MIT License || 4.17.47 || 4.17.47 ||  ||  || runs using bootstrap and moment.js  Current at July 2020 || n/a || n/a
 +
|-
 +
| Chart.js || ./htdocs/js/chartjs/README.mahara || http://www.chartjs.org  || MIT License || 2.9.3 || 2.9.3 ||  || PHP 5.3+ ||  || n/a || n/a
 +
|-
 +
| Clipboard js || ./htdocs/js/clipboard/README.Mahara || https://clipboardjs.com/ || MIT License || <span style="color:red">2.0.4 </span> || 2.0.6 ||  ||  || released March 2020 || looks like a bug fix, looks like one of the smaller upgrades  || n/a
 
|-
 
|-
| ADODB || ./htdocs/lib/adodb/README.mahara || http://adodb.org/ || Dual-licensed under the BSD and Lesser GPL license, with the BSD License having priority. || 5.20.12 || 5.20.9 ||   ||  || No major changes. Includes support for PHP7.2
+
| Cookie consent || ./htdocs/js/cookieconsent/README.mahara || https://www.osano.com/cookieconsent || MIT License || 3.1.1 || 3.1.1 ||   ||  || Current at July 2020 <br> NB: Has changed ownership, but there is still an OS version, which we are using || n/a || n/a
 
|-
 
|-
| Bootstrap Datetimepicker || ./htdocs/js/bootstrap-datetimepicker/README.mahara || https://eonasdan.github.io/bootstrap-datetimepicker/ || MIT License || 4.17.47 || 4.17.47 || 4.17.47 || || runs using bootstrap and moment.js
+
| CSS Tidy || ./htdocs/lib/csstidy/README.Mahara || https://github.com/Cerdic/CSSTidy || LGPL || 1.7.1 || 1.7.1 ||   || PHP 5.4+ || || n/a || n/a
 +
 
 
|-
 
|-
| Chart.js || ./htdocs/js/chartjs/README.mahara || http://www.chartjs.org  || || 1.1.0 || 2.7.3 || 1.1.1 ||  || No security patch, lots of fixed bugs, few new functions, few API
+
| Dragon-drop || ./htdocs/js/dragondrop/README.mahara || https://github.com/schne324/dragon-drop || MIT License || 3.2.1 || 3.2.1 ||  ||  || Up to date at July 2020 <br> last updated August 2019 || n/a || n/a
 
|-
 
|-
| Clipboard js || ./htdocs/js/clipboard/README.Mahara || https://clipboardjs.com/ || MIT License || 2.0.1 || 2.0.4 ||  ||  ||  
+
| Dropzone || ./htdocs/js/dropzone/README.mahara || https://github.com/enyo/dropzone  || MIT License || <span style="color:red">5.5.0</span> || 5.7.0 ||  ||  || Released Mar 10 <br> last updated July 2020 || we have no customisations, should be straight forward || n/a
 
|-
 
|-
| Cookie consent || ./htdocs/js/cookieconsent/README.mahara || http://sitebeam.net/cookieconsent/ || MIT License || 3.0.6 || 3.1.0 ||   || || fix for secure cookie flag
+
| Dwoo || ./htdocs/lib/dwoo/README.Mahara || <del>http://dwoo.org/, </del> https://github.com/dwoo-project/dwoo || GNU Lesser General Public License v3.0 || 1.3.7 || 1.3.7 ||  || PHP 5.3+ || Current at July 2020. Last updated July 2018 || n/a <br>NB: This library is no longer maintained || n/a <br>We will soon look at replacing this library
 +
 
|-
 
|-
| CSS Tidy || ./htdocs/lib/csstidy/README.Mahara || https://github.com/Cerdic/CSSTidy || LGPL || 1.5.5 || 1.5.5 ||   || PHP 5.4+ || no changes
+
| Elastic Search || ./htdocs/lib/elasticsearch/README.Mahara || https://github.com/elastic/elasticsearch-php || Apache v2.0 <br>LGPL v2.1 || <span style="color:red">6.1.0</span> || 7.8.0 ||  || PHP 7.1 <br>Native JSON 1.3.7 or higher || https://github.com/elastic/elasticsearch-php/blob/master/CHANGELOG.md <br> Patch in review to upgrade to 7.5, (Bug 1840101: update elasticsearch-php to 7.5) which currently works with ES server 6.8, but not 7.Note that our code needs to be upgraded so we can connect to ES server 7.6, which is a separate issue. || Investigation in process to upgrade our code.<br>---<br> Elastic Search PHP 7.8.0 is compatible with Elastic Search 7.8.0 || signed up to mailing list
 
|-
 
|-
| Dropzone || ./htdocs/js/dropzone/README.mahara || https://github.com/enyo/dropzone || MIT License || 4.3.0 || 5.5.0 || 4.3.0 || || Newer branch version
+
| fancybox3 || ./htdocs/js/fancybox/README.Mahara || https://fancyapps.com/fancybox/3/ || GPL 3.0 || 3.5.6 || 3.5.7 ||  || || no significant changes || n/a || Make their announcements via twitter <br>https://twitter.com/thefancyapps
 
|-
 
|-
| Dwoo || ./htdocs/lib/dwoo/README.Mahara || http://dwoo.org/ || Modified BSD License: || 1.2.0 || 1.3.4 ||  || PHP 5.3+ ||  
+
| gridstack || ./htdocs/js/gridstack/README.Mahara || https://github.com/gridstack/gridstack.js || MIT License || <span style="color:red">0.4.0</span> || 1.1.2 ||  ||  || A lot of activity in the past few months - looks to be significant structural changes, including removing jquery. || Investigation needed, but looks like a large change (Cecilia?) Change log: https://github.com/gridstack/gridstack.js/blob/develop/doc/CHANGES.md || questions can be posted in their slack channel <br>[https://join.slack.com/t/gridstackjs/shared_invite/enQtODE1NzkxMTUzNTIzLTA1NTEzZGE2NzliMGY5M2IwN2UzNWUzYmY2YTA0OTFlMTlmMDA3MTg3MGViZTRhZjM0N2QyODMyMjc1NzY4ZWQ slack channel]
 
|-
 
|-
| Elastic Search || ./htdocs/lib/elasticsearch/README.Mahara || https://github.com/elastic/elasticsearch-php || Apache v2.0 || 5.0 || 6.0.1 || ? || PHP 7.0
+
| HTML Purifier || ./htdocs/lib/htmlpurifier/README.Mahara || http://www.htmlpurifier.org/ || LGPL v2.1+ ||4.13.0 || 4.13.0 ||   || PHP >5.3 || New version supports PHP 7.4 || || updates via the 'NEWS' section on github README <br>https://github.com/ezyang/htmlpurifier/blob/v4.13.0/NEWS
 
|-
 
|-
| fancybox3 || ./htdocs/js/fancybox/README.Mahara || https://fancyapps.com/fancybox/3/ || GPL 3.0 || 3.3.5 || 3.5.6 ||   || ||
+
| Javascript templates || ./htdocs/js/javascript-templates/README.Mahara || https://github.com/blueimp/JavaScript-Templates || MIT License || 3.11.0 || 3.18.0 ||   || node.js|| They made some formatting changes, but no real changes. We don't need to upgrade || n/a || n/a
 
|-
 
|-
| HTML Purifier || ./htdocs/lib/htmlpurifier/README.Mahara || http://www.htmlpurifier.org/ || LGPL v2.1+ || 4.8.0 || 4.9.2 ||   || PHP 5.3+ || PHP7, minor changes
+
| jQuery || ./htdocs/js/jquery/README.Mahara || http://jquery.com/ || MIT License || 3.5.1 || 3.5.1 || ||  || || || Twitter: https://twitter.com/jquery <br> QA: https://forum.jquery.com/<br> IRC https://irc.jquery.org/
 
|-
 
|-
| Javascript templates || ./htdocs/js/javascript-templates/README.Mahara || https://github.com/blueimp/JavaScript-Templates || MIT License || 2.4.1 || 3.11.0 ||   || node.js ||  
+
| jQuery mobile || ./htdocs/js/jquery/jquery-mobile/README.Mahara || http://jquerymobile.com || MIT License || 1.5.0-alpha.1 || 1.5.0-rc1 || || || released Sept 2018, last updated  Jun 14, 2019 <br>touch.js last updated June 2016 (https://github.com/jquery/jquery-mobile/blob/master/js/events/touch.js) || No significant changes || QA: https://forum.jquery.com/jquery-mobile/
 
|-
 
|-
| jQuery || ./htdocs/js/jquery/README.Mahara || http://jquery.com/ || MIT License || 3.3.1 || 3.1.1 ||  || ||  
+
| jQuery UI || ./htdocs/js/jquery/jquery-ui/README.Mahara || http://jqueryui.com/ || MIT License || 1.12.1 || 1.12.1 ||  || jQuery 1.7+ || last updated July 2020 || n/a || jQuery Accessibility [https://groups.google.com/forum/#!forum/jquery-a11y jquery a11y forum] <br>
 
|-
 
|-
| jQuery mobile || ./htdocs/js/jquery/jquery-mobile/README.Mahara || http://jquerymobile.com || MIT License || 1.4.5 || 1.4.5 ||  || || is not currently being maintained
+
| jQuery UI plugin touch-punch || ./htdocs/js/jquery/jquery-ui/jquery-ui-touch-punch.min.js || http://touchpunch.furf.com/<br>https://github.com/furf/jquery-ui-touch-punch || MIT or GPL Version 2 licenses || 0.2.3 || 0.2.3 ||  || jquery, jquery-ui || is not currently being maintained || n/a || n/a
 
|-
 
|-
| jQuery UI || ./htdocs/js/jquery/jquery-ui/README.Mahara || http://jqueryui.com/ || MIT License || 1.12.1 || 1.12.1 ||  || jquery 1.6+ || is not currently being maintained
+
| JS Color || ./htdocs/js/jscolor/README.Mahara || http://jscolor.com/ || GPL 3 || 2.3.3 || 2.3.3 ||  ||  || bug fixes, extended features, performance tweaks || we have no customisations, hopefull straight forward upgrade, small? || n/a
 
|-
 
|-
| jQuery UI plugin touch-punch || ./htdocs/js/jquery/jquery-ui/jquery-ui-touch-punch.min.js || http://touchpunch.furf.com/ || MIT or GPL Version 2 licenses || 0.2.3 ||  || || jquery, jquery-ui || no changes
+
| Json editor || ./htdocs/js/jsoneditor/README.Mahara || https://github.com/json-editor/json-editor || MIT License || 1.3.0 || 2.3.0 ||  || || There are a number of changes, not sure how it will affect us || Investigation needed || n/a
 
|-
 
|-
| jQuery UI plugin Timepicker || ./htdocs/js/jquery/jquery-ui/js/jquery-ui-timepicker-addon.js || http://trentrichardson.com/examples/timepicker/ || MIT License || 1.5.0 || 1.6.3 ||   || jquery, jquery-ui || No security patch, minor changes
+
| jTLine || .htdocs/js/jTLine/README.Mahara || https://naadydev.github.io/jTLine/ || MIT License || 1.0 || 1.0 || || || Last updated Aug 2018. Our version is forked from the original || n/a || Twitter: https://twitter.com/naadydev
 
|-
 
|-
| JS Color || ./htdocs/js/jscolor/README.Mahara || http://jscolor.com/ || GPL 3 || 2.0.5 || 2.0.5 ||  ||  ||  
+
| Lodash || ./htdocs/js/lodash/README.Mahara || https://github.com/lodash/lodash || MIT License || <span style="color:red">4.17.15</span> || 4.17.16 ||  ||  || change log: https://github.com/lodash/lodash/wiki/Changelog <br>4.17.16 is latest release though change log shows from 14.17.15 to wip 4.17.19 || n/a?? Lodash was brought in with gridstack- gridstack v0.5.0 no longer have it as a requirement, if we upgrade gridstack we can probably let lodash go? || n/a - after we upgrade gridstack Lodash will be gone
 
|-
 
|-
| Marked || ./htdocs/js/marked/README.Mahara || https://github.com/markedjs/marked || MIT License || 0.4.0 || 0.6.0 ||  ||  || Security fix in version 0.5.0
+
| Marked || ./htdocs/js/marked/README.Mahara || https://github.com/markedjs/marked || MIT License || <span style="color:red">0.7.0</span> || 1.1.1 ||  ||  || No security updates || What we use is a min.js file, so it's hard to diff. Probably small effort to upgrade, but allow for medium due to unknown || n/a
 
|-
 
|-
| Masonry || ./htdocs/js/masonry/README.Mahara || https://masonry.desandro.com/ || MIT License || 4.2.2 || 4.2.2 ||  ||  ||  
+
| Masonry || ./htdocs/js/masonry/README.Mahara || https://masonry.desandro.com/ || MIT License || 4.2.2 || 4.2.2 ||  ||  || Current at July 2020. Last updated Jul 2018 || n/a || n/a
 
|-
 
|-
| Mobile detect || ./htdocs/lib/mobile_detect/README.Mahara || http://mobiledetect.net/ || MIT License || 2.8.19 || 2.8.24 ||   ||  || Add some new devices, minor changes
+
| Mobile detect || ./htdocs/lib/mobile_detect/README.Mahara || http://mobiledetect.net/ || MIT License || <span style="color:red">2.8.33</span> || 2.8.34 ||   ||  || Supported devices have been updated || Updating effort looks small || n/a
 
|-
 
|-
| Moment.js || ./htdocs/js/momentjs/README.Mahara || http://momentjs.com/ || MIT License || 2.22.2 || 2.23.0 ||  ||  || used in conjunction with the bootstrap datetimepicker
+
| Moment.js || ./htdocs/js/momentjs/README.Mahara || http://momentjs.com/ || MIT License || <span style="color:red">2.24.0</span> || 2.27.0 ||  ||  || used in conjunction with the bootstrap datetimepicker. || 2 releases have come out, looks like bug fixes <br>change log: https://gist.github.com/marwahaha <br> probably a small upgrade effort || n/a
 
|-
 
|-
| Oauth PHP || ./htdocs/webservice/libs/oauth-php/README.Mahara || http://code.google.com/p/oauth-php/ || MIT License || 175 || ||  ||  || This package is not maintained
+
| Oauth PHP || ./htdocs/webservice/libs/oauth-php/README.Mahara || http://code.google.com/p/oauth-php/ || MIT License || 175 || 175 ||  ||  || This package is not maintained and was last updated in 2010 || We should replace with an oauth2 php library https://oauth.net/code/php/ and / or checkout what Moodle do || n/a
 
|-
 
|-
| PDFjs || ./htdocs/artefact/file/blocktype/pdf/js/pdfjs/README.Mahara || http://mozilla.github.io/pdf.js/getting_started/#download || Apache License 2 || 1.9.426 || 1.9.426 || 1.10.88  || ||  
+
| PDFjs || ./htdocs/artefact/file/blocktype/pdf/js/pdfjs/README.Mahara || http://mozilla.github.io/pdf.js/getting_started/#download || Apache License 2 || <span style="color:red">2.2.228</span> || 2.4.456 || ||  || change log:https://github.com/mozilla/pdf.js/releases/tag/v2.4.456 || Medium to large upgrade, depending on if structure changes. Investigation needed || n/a
 
|-
 
|-
| PHPMailer || ./htdocs/lib/phpmailer/README.Mahara || https://github.com/PHPMailer/PHPMailer || LGPL || 5.2.21 || 5.2.22 ||   ||  || Should upgrade to 5.2.22 fro security patch
+
| PHPMailer || ./htdocs/lib/phpmailer/README.Mahara || https://github.com/PHPMailer/PHPMailer || LGPL || 6.0.6 || 6.1.4 || ||  || Changes include compatibility fixes for PHP7.4 No security fixes || In progress <-- is there a patch for this? The latest version is now 6.1.7 (maintenance release) || n/a
 
|-
 
|-
| ReCaptcha || ./htdocs/lib/recaptcha/README.Mahara || https://github.com/google/recaptcha || MIT License || 1.1.2 || 1.1.3 ||   || 5.5+ || minor changes
+
| Popper || ./htdocs/lib/popper/README.Mahara || https://popper.js.org/ || MIT License || 1.16.0 || 2.4.4 || || || Very active project with a lot of releases. || Used by Bootstrap. When Bootstrap updates to use popper V2x we will be able to upgrade popper.<br>https://github.com/twbs/bootstrap/pull/31178 || n/a
 
|-
 
|-
| Select2 || ./htdocs/js/select2/README.Mahara || https://select2.org/ || MIT Licene || 4.0.1 || 4.0.6-rc1 || 4.0.5 || || No security patch, lots of fixed bugs, few new functions
+
| ReCaptcha || ./htdocs/lib/recaptcha/README.Mahara || https://github.com/google/recaptcha || BSD-3 || 1.2.1 || 1.2.4 ||   || 5.5+ || Changes are to documentation, not code, so no need to update || n/a || n/a
 
|-
 
|-
| simplesamlphp || /htdocs/auth/saml/extlib/simplesamlphp/README.md || || || 1.15.0 ||  ||  || || plugin is not included in the code. There is a command included in the Makefile. To get the plugin we need to run "make ssphp"
+
| Select2 || ./htdocs/js/select2/README.Mahara || https://select2.org/ || MIT License || 4.0.9 || 4.0.13 ||  ||  || Bug fixes and improvements, no major changes or security fixes || At least medium effort to upgrade, as there are several changes in Mahara and quite a bit of testing || n/a
 
|-
 
|-
| Skin fonts || /htdocs/lib/fonts/README.Mahara || http://www.fontsquirrel.com/fonts/Aurulent-Sans ,http://www.fontsquirrel.com/fonts/DejaVu-Sans, http://scripts.sil.org/cms/scripts/page.php?item_id=CharisSIL, http://sourceforge.net/projects/gs-fonts/ || Multiple licenses || n/a, 2.29, 5.000, 8.11 ||  ||  ||  || no changes, Should move to htdocs/theme/raw/fonts/skin
+
| simplesamlphp || /htdocs/auth/saml/extlib/simplesamlphp/README.md || https://github.com/simplesamlphp/simplesamlphp || GPL 2.1 || <span style="color:red">1.18.4</span> || 1.18.47||  || || 3 releases since our current version, 1.18.16 addresses security issue: https://simplesamlphp.org/security/202004-01 || Investigation needed into the effort + testing required<br>change log: https://simplesamlphp.org/docs/1.18/simplesamlphp-changelog#section_1 || We have joined the mailing list<br>https://simplesamlphp.org/lists
 
|-
 
|-
| System fonts || ./htdocs/theme/raw/fonts/README.Mahara, ./htdocs/theme/raw/sass/lib/font-awesome/README.Mahara || http://fontawesome.io, https://www.google.com/fonts/specimen/Open+Sans, https://www.google.com/fonts/specimen/Roboto+Slab || http://fontawesome.io/license, MIT License, Apache License, version 2.0 || 4.7.0, 1, 1, 1.9 ||   ||   ||  || no changes
+
| Skin fonts || /htdocs/lib/fonts/README.Mahara || http://www.fontsquirrel.com/fonts/Aurulent-Sans ,http://www.fontsquirrel.com/fonts/DejaVu-Sans, http://scripts.sil.org/cms/scripts/page.php?item_id=CharisSIL, http://sourceforge.net/projects/gs-fonts/ || Multiple licenses || n/a, 2.29, 5.000, 8.11 || || ||  || no changes || n/a || n/a
 
|-
 
|-
| TinyMCE || ./htdocs/js/tinymce/README.Mahara || https://www.tiny.cloud/|| LGPL || 4.8.2 ||  || 4.9.|| || No security patch, lots of fixed bugs, few new functions
+
| System fonts || ./htdocs/theme/raw/fonts/README.Mahara, ./htdocs/theme/raw/sass/lib/font-awesome/README.Mahara || http://fontawesome.io, https://www.google.com/fonts/specimen/Open+Sans, https://www.google.com/fonts/specimen/Roboto+Slab || http://fontawesome.io/license, MIT License, Apache License, version 2.0 || 5.8.1, 1, 1, 1.9 || 5.14.0, 1, 1, 1.9  ||        ||  || changes to unicode for fontawesome https://github.com/FortAwesome/Font-Awesome/blob/master/UPGRADING.md || medium effort to upgrade due to needing to check for issues. || n/a
 +
 
 
|-
 
|-
| TinyMCE - Mathslate || ./htdocs/js/tinymce/plugins/mathslate/README.Mahara || https://github.com/dthies/tinymce4-mathslate || GPL 3 || 1.1 || ||   || || no changes
+
| TinyMCE || ./htdocs/js/tinymce/README.Mahara || https://www.tiny.cloud/|| LGPL || 5.0.13 || 5.4.1 || || || A number of bug fixes and improvements<br>https://www.tiny.cloud/docs/changelog/<br>Test on mobile when updating || probably only worth updating if we are affected by any of the bugs they are fixing. Need to investigate that and how long it would take. || Blog: https://www.tiny.cloud/blog/category/news-and-updates/
 
|-
 
|-
| Video.js || ./htdocs/artefact/file/blocktype/internalmedia/videojs/README.Mahara || http://videojs.com/ || Apache License 2.0 || 5.6.0 || 5.17.0 ||   ||  || No security patch, lots of fixed bugs, few new functions
+
| TinyMCE - Mathslate || ./htdocs/js/tinymce/plugins/mathslate/README.Mahara || https://github.com/dthies/tinymce4-mathslate || GPL 3 || 1.1 || 1.1 ||  || || no changes<br>Our version is now forked to keep make it work with Tinymce 5 || n/a
 +
  || n/a
 
|-
 
|-
| Zend framework || ./htdocs/webservice/libs/zend/README.Mahara || http://framework.zend.com/ || New BSD: || 1.12.19 || 3.x || 1.12.20 || 5.6+ || Security patch for 1.12,
+
| Video.js || ./htdocs/artefact/file/blocktype/internalmedia/videojs/README.Mahara || http://videojs.com/ || Apache License 2.0 || 7.6.5 || 7.8.4 ||   || || Some bug fixes. Looks mostly minor changes<br>https://github.com/videojs/video.js/releases || Needs investigation. Probably small to medium || we have signed up to their mailing list
API changes for Zend 3
 
PHP 7 for Zend 3.x
 
1.12.20 has a security patch, but doesnt affect the part of the library we use.
 
 
|-
 
|-
| zxcvbn || ./htdocs/js/zxcvbn/README.Mahara || https://github.com/dropbox/zxcvbn || MIT License || 4.4.2 || 4.4.2 || 4.4.2 ||  ||  
+
| zxcvbn || ./htdocs/js/zxcvbn/README.Mahara || https://github.com/dropbox/zxcvbn || MIT License || 4.4.2 || 4.4.2 || ||  || Current at July 2020<br>Last updated Feb 2017 || Should we change to a maintained library, eg https://github.com/bjeavons/zxcvbn-php? Yes we should but is that one just a port of the js version or is it an updated / more robust system? || n/a
 
|}
 
|}

Latest revision as of 15:40, 2 October 2020

A list of the third party plugins within Mahara.

A helpful way to update this list is to go:

 find ./htdocs -type f -iname "README.Mahara" -exec grep 'Version' -B1 {} \; -print

on the current codebase.

Note: another thing to keep in sync is the country names we use for 'Country' dropdowns. To check what the current state of play is

 perl -MLocale::Country -le 'print join("\n", sort map { country2code($_) . " => " . country2code($_, LOCALE_CODE_ALPHA_3) . ", // " . $_ } all_country_names())'

and check the results against htdocs/lib/country.php and htdocs/lang/en.utf8/mahara.php files For any confusion you can also check against https://www.iso.org

Indicating what version they are on in Mahara and what they currently are on at time of publishing 09 Jan 2019:

Current versions marked in Red indicate the plugin needs updating/upgrading.

Name Readme file URL License Current version Latest version Latest branch version Requirements of latest version Note Estimated upgrade time Notifications
ADODB ./htdocs/lib/adodb/README.mahara http://adodb.org/ Dual-licensed under the BSD and Lesser GPL license, with the BSD License having priority. 5.20.16 5.20.17   We need to update to version 5.21 for PHP 7.4 compatibility, but this has not been released as at July 2020 (Bug 1859528) The current roadmap is that issues related to PHP 7.3 and higher will only be fixed in ADOdb version 5.21+. Investigation needed, we could possibly want to go to 5.20.17 ADOB release all news on current releases + important bug fixes on https://twitter.com/ADOdb_announce first.
Bootstrap ./htdocs/lib/bootstrap/README.Mahara https://getbootstrap.com/ MIT License 4.3.1 4.5.0 Dependencies: Updated jQuery to v3.5.1 There have been 2 minor point releases since we upgraded Investigation needed (Liam?) Bootstrap has an RSS feed: https://blog.getbootstrap.com/feed.xml
and a twitter account: https://twitter.com/getbootstrap
Bootstrap Datetimepicker ./htdocs/js/bootstrap-datetimepicker/README.mahara https://eonasdan.github.io/bootstrap-datetimepicker/ MIT License 4.17.47 4.17.47 runs using bootstrap and moment.js Current at July 2020 n/a n/a
Chart.js ./htdocs/js/chartjs/README.mahara http://www.chartjs.org MIT License 2.9.3 2.9.3 PHP 5.3+ n/a n/a
Clipboard js ./htdocs/js/clipboard/README.Mahara https://clipboardjs.com/ MIT License 2.0.4 2.0.6 released March 2020 looks like a bug fix, looks like one of the smaller upgrades n/a
Cookie consent ./htdocs/js/cookieconsent/README.mahara https://www.osano.com/cookieconsent MIT License 3.1.1 3.1.1 Current at July 2020
NB: Has changed ownership, but there is still an OS version, which we are using
n/a n/a
CSS Tidy ./htdocs/lib/csstidy/README.Mahara https://github.com/Cerdic/CSSTidy LGPL 1.7.1 1.7.1 PHP 5.4+ n/a n/a
Dragon-drop ./htdocs/js/dragondrop/README.mahara https://github.com/schne324/dragon-drop MIT License 3.2.1 3.2.1 Up to date at July 2020
last updated August 2019
n/a n/a
Dropzone ./htdocs/js/dropzone/README.mahara https://github.com/enyo/dropzone MIT License 5.5.0 5.7.0 Released Mar 10
last updated July 2020
we have no customisations, should be straight forward n/a
Dwoo ./htdocs/lib/dwoo/README.Mahara http://dwoo.org/, https://github.com/dwoo-project/dwoo GNU Lesser General Public License v3.0 1.3.7 1.3.7 PHP 5.3+ Current at July 2020. Last updated July 2018 n/a
NB: This library is no longer maintained
n/a
We will soon look at replacing this library
Elastic Search ./htdocs/lib/elasticsearch/README.Mahara https://github.com/elastic/elasticsearch-php Apache v2.0
LGPL v2.1
6.1.0 7.8.0 PHP 7.1
Native JSON 1.3.7 or higher
https://github.com/elastic/elasticsearch-php/blob/master/CHANGELOG.md
Patch in review to upgrade to 7.5, (Bug 1840101: update elasticsearch-php to 7.5) which currently works with ES server 6.8, but not 7.Note that our code needs to be upgraded so we can connect to ES server 7.6, which is a separate issue.
Investigation in process to upgrade our code.
---
Elastic Search PHP 7.8.0 is compatible with Elastic Search 7.8.0
signed up to mailing list
fancybox3 ./htdocs/js/fancybox/README.Mahara https://fancyapps.com/fancybox/3/ GPL 3.0 3.5.6 3.5.7 no significant changes n/a Make their announcements via twitter
https://twitter.com/thefancyapps
gridstack ./htdocs/js/gridstack/README.Mahara https://github.com/gridstack/gridstack.js MIT License 0.4.0 1.1.2 A lot of activity in the past few months - looks to be significant structural changes, including removing jquery. Investigation needed, but looks like a large change (Cecilia?) Change log: https://github.com/gridstack/gridstack.js/blob/develop/doc/CHANGES.md questions can be posted in their slack channel
slack channel
HTML Purifier ./htdocs/lib/htmlpurifier/README.Mahara http://www.htmlpurifier.org/ LGPL v2.1+ 4.13.0 4.13.0 PHP >5.3 New version supports PHP 7.4 updates via the 'NEWS' section on github README
https://github.com/ezyang/htmlpurifier/blob/v4.13.0/NEWS
Javascript templates ./htdocs/js/javascript-templates/README.Mahara https://github.com/blueimp/JavaScript-Templates MIT License 3.11.0 3.18.0 node.js They made some formatting changes, but no real changes. We don't need to upgrade n/a n/a
jQuery ./htdocs/js/jquery/README.Mahara http://jquery.com/ MIT License 3.5.1 3.5.1 Twitter: https://twitter.com/jquery
QA: https://forum.jquery.com/
IRC https://irc.jquery.org/
jQuery mobile ./htdocs/js/jquery/jquery-mobile/README.Mahara http://jquerymobile.com MIT License 1.5.0-alpha.1 1.5.0-rc1 released Sept 2018, last updated Jun 14, 2019
touch.js last updated June 2016 (https://github.com/jquery/jquery-mobile/blob/master/js/events/touch.js)
No significant changes QA: https://forum.jquery.com/jquery-mobile/
jQuery UI ./htdocs/js/jquery/jquery-ui/README.Mahara http://jqueryui.com/ MIT License 1.12.1 1.12.1 jQuery 1.7+ last updated July 2020 n/a jQuery Accessibility jquery a11y forum
jQuery UI plugin touch-punch ./htdocs/js/jquery/jquery-ui/jquery-ui-touch-punch.min.js http://touchpunch.furf.com/
https://github.com/furf/jquery-ui-touch-punch
MIT or GPL Version 2 licenses 0.2.3 0.2.3 jquery, jquery-ui is not currently being maintained n/a n/a
JS Color ./htdocs/js/jscolor/README.Mahara http://jscolor.com/ GPL 3 2.3.3 2.3.3 bug fixes, extended features, performance tweaks we have no customisations, hopefull straight forward upgrade, small? n/a
Json editor ./htdocs/js/jsoneditor/README.Mahara https://github.com/json-editor/json-editor MIT License 1.3.0 2.3.0 There are a number of changes, not sure how it will affect us Investigation needed n/a
jTLine .htdocs/js/jTLine/README.Mahara https://naadydev.github.io/jTLine/ MIT License 1.0 1.0 Last updated Aug 2018. Our version is forked from the original n/a Twitter: https://twitter.com/naadydev
Lodash ./htdocs/js/lodash/README.Mahara https://github.com/lodash/lodash MIT License 4.17.15 4.17.16 change log: https://github.com/lodash/lodash/wiki/Changelog
4.17.16 is latest release though change log shows from 14.17.15 to wip 4.17.19
n/a?? Lodash was brought in with gridstack- gridstack v0.5.0 no longer have it as a requirement, if we upgrade gridstack we can probably let lodash go? n/a - after we upgrade gridstack Lodash will be gone
Marked ./htdocs/js/marked/README.Mahara https://github.com/markedjs/marked MIT License 0.7.0 1.1.1 No security updates What we use is a min.js file, so it's hard to diff. Probably small effort to upgrade, but allow for medium due to unknown n/a
Masonry ./htdocs/js/masonry/README.Mahara https://masonry.desandro.com/ MIT License 4.2.2 4.2.2 Current at July 2020. Last updated Jul 2018 n/a n/a
Mobile detect ./htdocs/lib/mobile_detect/README.Mahara http://mobiledetect.net/ MIT License 2.8.33 2.8.34   Supported devices have been updated Updating effort looks small n/a
Moment.js ./htdocs/js/momentjs/README.Mahara http://momentjs.com/ MIT License 2.24.0 2.27.0 used in conjunction with the bootstrap datetimepicker. 2 releases have come out, looks like bug fixes
change log: https://gist.github.com/marwahaha
probably a small upgrade effort
n/a
Oauth PHP ./htdocs/webservice/libs/oauth-php/README.Mahara http://code.google.com/p/oauth-php/ MIT License 175 175 This package is not maintained and was last updated in 2010 We should replace with an oauth2 php library https://oauth.net/code/php/ and / or checkout what Moodle do n/a
PDFjs ./htdocs/artefact/file/blocktype/pdf/js/pdfjs/README.Mahara http://mozilla.github.io/pdf.js/getting_started/#download Apache License 2 2.2.228 2.4.456 change log:https://github.com/mozilla/pdf.js/releases/tag/v2.4.456 Medium to large upgrade, depending on if structure changes. Investigation needed n/a
PHPMailer ./htdocs/lib/phpmailer/README.Mahara https://github.com/PHPMailer/PHPMailer LGPL 6.0.6 6.1.4 Changes include compatibility fixes for PHP7.4 No security fixes In progress <-- is there a patch for this? The latest version is now 6.1.7 (maintenance release) n/a
Popper ./htdocs/lib/popper/README.Mahara https://popper.js.org/ MIT License 1.16.0 2.4.4 Very active project with a lot of releases. Used by Bootstrap. When Bootstrap updates to use popper V2x we will be able to upgrade popper.
https://github.com/twbs/bootstrap/pull/31178
n/a
ReCaptcha ./htdocs/lib/recaptcha/README.Mahara https://github.com/google/recaptcha BSD-3 1.2.1 1.2.4   5.5+ Changes are to documentation, not code, so no need to update n/a n/a
Select2 ./htdocs/js/select2/README.Mahara https://select2.org/ MIT License 4.0.9 4.0.13 Bug fixes and improvements, no major changes or security fixes At least medium effort to upgrade, as there are several changes in Mahara and quite a bit of testing n/a
simplesamlphp /htdocs/auth/saml/extlib/simplesamlphp/README.md https://github.com/simplesamlphp/simplesamlphp GPL 2.1 1.18.4 1.18.47 3 releases since our current version, 1.18.16 addresses security issue: https://simplesamlphp.org/security/202004-01 Investigation needed into the effort + testing required
change log: https://simplesamlphp.org/docs/1.18/simplesamlphp-changelog#section_1
We have joined the mailing list
https://simplesamlphp.org/lists
Skin fonts /htdocs/lib/fonts/README.Mahara http://www.fontsquirrel.com/fonts/Aurulent-Sans ,http://www.fontsquirrel.com/fonts/DejaVu-Sans, http://scripts.sil.org/cms/scripts/page.php?item_id=CharisSIL, http://sourceforge.net/projects/gs-fonts/ Multiple licenses n/a, 2.29, 5.000, 8.11 no changes n/a n/a
System fonts ./htdocs/theme/raw/fonts/README.Mahara, ./htdocs/theme/raw/sass/lib/font-awesome/README.Mahara http://fontawesome.io, https://www.google.com/fonts/specimen/Open+Sans, https://www.google.com/fonts/specimen/Roboto+Slab http://fontawesome.io/license, MIT License, Apache License, version 2.0 5.8.1, 1, 1, 1.9 5.14.0, 1, 1, 1.9 changes to unicode for fontawesome https://github.com/FortAwesome/Font-Awesome/blob/master/UPGRADING.md medium effort to upgrade due to needing to check for issues. n/a
TinyMCE ./htdocs/js/tinymce/README.Mahara https://www.tiny.cloud/ LGPL 5.0.13 5.4.1 A number of bug fixes and improvements
https://www.tiny.cloud/docs/changelog/
Test on mobile when updating
probably only worth updating if we are affected by any of the bugs they are fixing. Need to investigate that and how long it would take. Blog: https://www.tiny.cloud/blog/category/news-and-updates/
TinyMCE - Mathslate ./htdocs/js/tinymce/plugins/mathslate/README.Mahara https://github.com/dthies/tinymce4-mathslate GPL 3 1.1 1.1 no changes
Our version is now forked to keep make it work with Tinymce 5
n/a n/a
Video.js ./htdocs/artefact/file/blocktype/internalmedia/videojs/README.Mahara http://videojs.com/ Apache License 2.0 7.6.5 7.8.4   Some bug fixes. Looks mostly minor changes
https://github.com/videojs/video.js/releases
Needs investigation. Probably small to medium we have signed up to their mailing list
zxcvbn ./htdocs/js/zxcvbn/README.Mahara https://github.com/dropbox/zxcvbn MIT License 4.4.2 4.4.2 Current at July 2020
Last updated Feb 2017
Should we change to a maintained library, eg https://github.com/bjeavons/zxcvbn-php? Yes we should but is that one just a port of the js version or is it an updated / more robust system? n/a