what happened to antonmedv/expr?

[Slahser]

this lib now 404...

[agilgur5]

Well that's worrisome. We interact with the maintainer relatively often too.

I was going to cc @antonmedv but it looks like the entire GitHub account is deactivated right now, not just the expr repo. The website is also not loading right now: https://expr.medv.io/. It may have been hosted on GH pages.

Hopefully the situation resolves itself, but in the interim, can see the docs at my fork: https://github.com/agilgur5/expr/blob/master/docs/Language-Definition.md.

I made a contribution earlier this week, so this is a very recent event, thanks for notifying us!

[agilgur5]

Looks like the website is back up now. Account and repo still 404

[agilgur5]

Found the author's Twitter page from the website (and confirmed it was linked to previously). Looks like GitHub flagged the account for some reason and hasn't responded since 😕

I retweeted for reach

[antonmedv]

My GitHub account got flagged. Trying to contact GitHub stuff, to figure out why. But still no response.

[antonmedv]

https://expr.medv.io now works.

Moved https://expr.medv.io to personal hosting from GitHub. I will eventually move to CloudFlare.

[agilgur5]

Back to normal now: https://github.com/antonmedv/expr.

Thanks for working through the issues and explaining the situation to everyone @antonmedv!
(See Twitter thread for details)

[terrytangyuan]

Thanks for bringing this to our attention. We are aware of this and are working with other maintainers to decide on an approach (other Argo projects also use it).

[annamedv]

We with @antonmedv working on resolving this issues right now. Also @antonmedv has a fork in a separate org here: https://github.com/expr-lang/expr

[terrytangyuan]

Thanks! We can probably switch to use that for now.

[agilgur5]

@annamedv could @antonmedv publicly confirm that this is an appropriate fork to use in the interim? Such as in response on Twitter?

Given the prevalence of supply chain attacks, a trusted source confirming is important.
I did confirm that the git SHAs on GitHub match at least: expr-lang/expr@709c5dd is the same as agilgur5/expr@709c5dd. Although it is a few commits behind the tip

[agilgur5]

@antonmedv confirmed on Twitter that this is a fork they created some time ago and is safe to use.