Subject: bug#26176: What to do about unmaintained frameworks like [email-masked] in Guix?

From: Leo Famulari <[email-masked]>
Date: Fri, 7 Apr 2017 08:02:42 -0400

On Mon, Mar 20, 2017 at 08:50:54AM +0200, Efraim Flashner wrote:
> kicad uses wxwidgets built with gtk+-2, and the one that didn't show up
> at all, gnucash, uses webkitgtk/gtk+-2, which is the gtk+@2 version of
> [email-masked].

Good news: the GnuCash developers are actively working make GnuCash
compatible with the latest version of webkitgtk (or to completely remove
the dependency):

https://bugzilla.gnome.org/show_bug.cgi?id=751635

The other good news is that, apparently, GnuCash's use of webkit is
relatively insulated from security issues:

"GnuCash isn't affected by WebKit vulnerabilities, WebKit is used
exclusively to render HTML and interpret Javascript both created by
GnuCash itself."

https://bugzilla.gnome.org/show_bug.cgi?id=751635#c4