[Pkg-privacy-maintainers] Bug#1112383: libcryptui: unmaintained upstream; upstream repository is archived and read-only

[Simon McVittie]

Source: libcryptui
Severity: important
Tags: upstream wontfix
X-Debbugs-Cc: evolution at packages.debian.org, almanah at packages.debian.org, seahorse-nautilus at packages.debian.org, caja-seahorse at packages.debian.org

libcryptui's upstream git repository has been moved to 
https://gitlab.gnome.org/Archive/libcryptui and archived. This means 
that it no longer accepts issue reports or merge requests, even if a 
serious problem is found. This seems unwelcome for a cryptographic 
component!

I think we should plan to remove libcryptui from forky.

The most significant user of libcryptui is evolution, which 
Build-Depends on libcryptui-dev (but perhaps unnecessarily).
Notably, GNOME's seahorse package, also known as "Passwords and 
Secrets", doesn't use libcryptui any more.

Other packages that still use libcryptui:

* almanah - Application to ease management of a personal diary
  (already marked for autoremoval due to an unrelated RC bug)

* seahorse-nautilus - Nautilus extension for Seahorse integration
  (which has itself been archived upstream)

* caja-seahorse - Caja extension to encrypt/decrypt OpenPGP files using GnuPG
  (a fork of seahorse-nautilus, I think)

    smcv