Skip to content

update to 0.16.2 (fork)

T.J. Townsend requested to merge (removed):main into main

For your consideration:

The libid3tag project has been dead for a long time. This switches our package to the tenacityteam/libid3tag fork, which fixes (at least) CVE-2017-11550 but has not seen a whole lot of activity since last year.

Considered but not implemented in this change is the use of a PGP-signed git tag with the key 0xF4D83691462F656E. I'm not sure about the consistency of that key being used or if there will ever even be another release.

Merge request reports