In mid-September, we reported that Nick Wellnhofer, the long-time maintainer of the widely used XML parsing library libxml2, planned to step down from the project. A few days ago, that change became official.

When looking at one of the latest commits in the project’s GitLab repository, you can now see the following notice:

“This project is unmaintained and has known security issues (https://gitlab.gnome.org/GNOME/libxml2/-/issues/346). It is foolish to use this software to process untrusted data.”

  • frongt@lemmy.zip
    link
    fedilink
    arrow-up
    21
    arrow-down
    3
    ·
    2 days ago

    I hope this is a nail in the coffin for xml. It’s just so unpleasant to work with, even through great libraries.

      • magic_lobster_party@fedia.io
        link
        fedilink
        arrow-up
        2
        ·
        13 hours ago

        Not the one you asked, but I don’t like XML compared to alternatives like JSON.

        The main problem with XML is that it’s an unnecessarily complicated standard. There are often multiple ways to represent the same thing, each with their own gotchas and drawbacks.

        JSON on the other hand has a much simpler standard. The entire JSON standard fits easily in one page. It’s also closer to how data is actually represented in memory. There’s often one ideal way to represent whatever you have in memory to a JSON file, and the reverse is also true.

        Despite it’s simplicity, JSON covers most cases XML would cover. Often in a more elegant way.

        If you like pain, then XML is the right choice for you.

        • IHeartBadCode@fedia.io
          link
          fedilink
          arrow-up
          28
          ·
          2 days ago

          That’s super underselling it. Open Financial Exchange OFX is still the go-to for markets and banks to exchange information with various end user devices. ISO 20022 is a standard used in banking that is XML based. Fedwire, the platform that moves money between the central banks completed transition to XML in July… of this year.

          Credit reporting agencies, insurance agencies, hospitals, medicare, medicaid, massive amounts of the entire global logistics industry are heavily using XML with no plans in the near future to move off of it. Like the network that handles auto insurance claims and reporting them to people like LexisNexus is all XML.

          Like it’s impossible to cover just how much of this planet runs on XML.

          • elmicha@feddit.org
            link
            fedilink
            arrow-up
            17
            ·
            2 days ago

            Don’t forget the OpenDocument format of LibreOffice and the other format of the other office suite. Yeah, these will be retired any day now.

            Also these.

          • raman_klogius@ani.social
            link
            fedilink
            English
            arrow-up
            7
            ·
            edit-2
            2 days ago

            It was in fact these non-browser interests that initially poisoned W3C to take the position of completely abandoning html for XML back in 2004… Where the browser companies immediately ignored the decision and formed their own working group (whatwg) which worked on almost all new web technologies post html4.

      • 4am@lemmy.zip
        link
        fedilink
        arrow-up
        13
        ·
        2 days ago

        Every office suite document format is just a disguised ZIP archive full of XML files.

    • sik0fewl@lemmy.ca
      link
      fedilink
      arrow-up
      10
      arrow-down
      1
      ·
      2 days ago

      Yes, things will be so much better when we eventually replicate all of XML’s functionality in JSON.

    • expr@programming.dev
      link
      fedilink
      arrow-up
      7
      ·
      2 days ago

      It’s great for non-HTML markup, like https://hyperview.org/.

      A lot of the hate is undeserved. It has had awful paradigms built around it (like SOAP), but that doesn’t make XML inherently bad by any means.

    • ulterno@programming.dev
      link
      fedilink
      English
      arrow-up
      2
      ·
      2 days ago

      Sure it is, but I don’t see a good enough replacement.
      Although I have only used XML a couple of times, which were in other people’s projects, and considering their low complexity, they might as well have used JSON, XML does have a space where JSON is not good enough.