onebeyond/rascal

Dependency on amqplib

Closed this issue · 1 comments

gsuhm commented

Love Rascal, but amqplib seems to be going through some tough times -

Is amqplib abandoned?
amqplib full issue list - 130 open issues!

Any thoughts on the future of Rascal using amqplib?

Hi @gsuhm,

I've no plans to migrate Rascal to another client. While I agree the current situation with amqplib isn't ideal, nothing else comes close to its reliability or maturity. I'm also not sure that the level of concern raised by some users is fully justified. For example, the vulnerability with url-parse is highly unlikely to affect anyone, unless an untrusted party has access to the connection configuration.