Be notified about abandoned projects

[treezio]

Hi 👋🏻
Crazy idea here!

We were wondering in a discussion that even though is not updatecli's scope as of today, It would be really nice to be notified in case some project used as a source is deprecated/archived/abandoned somehow. It may happen that we stop receiving pull request notifications from an specific projects and that would be kind of difficult to detect in case you manage many applications as we do.

There could be some indicators (github example):

• repository has been archived
• last release is from > $number-of-days days ago (could be configured in pipeline definition)

In case some of this indicators match, updatecli could open an Issue in the GitOps repository specified in the scm pointing out that the source seems or could be abandoned/deprecated.

What do you think ?

Cheers !

[olblak]

Well, you bring different topics, that I've been thinking for a while.

Identifying deprecated/archived dependencies is a tricky one, and it may require a big effort to review all Updatecli integration like NPM, GitHub release, etc. but we could definitely start one by one.
I like very much your suggestion to see if a GitHub release is associated with "archived" GitHub repository it should easily be doable but restricted to GitHub for now.

I also thought about implementing libyear within Updatecli, probably by adding the information to changelogs.

Regarding notification, I've been considering adding new action for sending messages on variable platform.
This library looks promising https://github.com/nikoksr/notify

[treezio]

Nice, thank you for taking this into consideration :D

although I can imagine that could be really tricky we can use a lean approach and start with GitHub as you mention.

That libyear measurement makes sense to me, never heard of it!

About the notifications system, the issue creation workaround sounded good to me as everything is kept around the GitOps repository, but having an integration with external notification system would work for me too!

Thanks for your thoughts around this !