gorilla is archived/no longer maintained

[JonEngle]

Page 9 recommends gorilla as a 3rd party package, but the gorilla maintainers have archived the project.

[ErezYalon]

Thanks, @JonEngle, would you like to suggest an alternative and/or open a PR?

[theAnuragMishra]

I think gorilla being archived doesn't mean it's insecure, does it? I have been using a bunch of gorilla libraries and they always work well.

[qba73]

@ErezYalon @JonEngle possibly chi? The OSS Scorecard marks not maintained projects as HIGH risk status.

@theAnuragMishra correct, but who is in charge of ongoing security patches?

[theAnuragMishra]

@qba73 I think gorilla was revived
https://gorilla.github.io/blog/2023-07-17-project-status-update/