Automatically list projects in the Apache Attic or similar foundation locations

[ShaneCurcuru]

The ASF has the Apache Attic, where we explicitly put projects into a read-only state after it is clear that there isn't an active community to maintain them. While this is not strictly the same kind of criteria as official deprecation/EOL announcements, it's similar in that no further official releases or support will be available for these projects after they go into the attic.

A simplistic if incomplete listing of ASF projects (i.e. whole community projects, which will include one or more named software releases) that are in the Attic is here:

https://whimsy.apache.org/public/committee-retired.json

[marcwrobel]

Hi @ShaneCurcuru, thanks a lot for this suggestion.

Given those projects are clearly documented as abandoned, both on https://attic.apache.org/ and on each project's dedicated website (such as https://any23.apache.org/), I am not sure there would be much value in listing them also on endoflife.date. WDYT ?

Beside that endoflife.date is very much "release" oriented. This means that listing those products would require information about at least the latest versions. Is it still always (or at least most of the time) available ?

@endoflife-date/everyone any thought on this idea ?

[captn3m0]

I think it might be worth it for some notable projects in the attic (maybe 100k+ installs?) - this might be helpful information for scanners to pick up.

[ShaneCurcuru]

There is a bunch of tooling and metadata across the ASF, so some attic project's releases (which seem to be what you'd track) should be easily detectable, once you find the right URL. But that doesn't necessarily apply to all Attic projects.

Places to look/ask for help with ASF metadata if people are interested include:

https://projects.apache.org/projects.html - the ComDev project and the DOAP project listing have some tooling tracking releases and other data, although not all projects fully comply.

https://lists.apache.org/list.html?dev@kibble.apache.org - the Apache Kibble project is building metadata tools about projects, so might have ideas to share in general.

[marcwrobel]

Thanks a lot @ShaneCurcuru, I have opened #4672.