[GH-ISSUE #1620] 🔧 [Refactor] review all Cypht dependencies #686

Closed
opened 2026-02-25 21:35:40 +03:00 by kerem · 8 comments
Owner

Originally created by @marclaporte on GitHub (Aug 20, 2025).
Original GitHub issue: https://github.com/cypht-org/cypht/issues/1620

Originally assigned to: @bienvenuushindi on GitHub.

🔧 Refactor

Here are Cypht dependencies:

Are there any others in the code base?

Are dependencies:

Originally created by @marclaporte on GitHub (Aug 20, 2025). Original GitHub issue: https://github.com/cypht-org/cypht/issues/1620 Originally assigned to: @bienvenuushindi on GitHub. <!-- You can find the latest issue templates here https://github.com/ulfgebhardt/issue-templates --> ## 🔧 Refactor Here are Cypht dependencies: * https://github.com/cypht-org/cypht/tree/master/third_party * https://github.com/cypht-org/cypht/blob/master/composer.json Are there any others in the code base? Are dependencies: * Still used? * With latest stable version? * Active? Inspiration in case they should be replaced: https://dev.tiki.org/How-to-pick-a-software-library * Alphabetically sorted in lists?
kerem 2026-02-25 21:35:40 +03:00
  • closed this issue
  • added the
    refactor
    label
Author
Owner

@marclaporte commented on GitHub (Aug 29, 2025):

Also, please harmonize the content of https://github.com/cypht-org/cypht/tree/master/third_party

Version number, copyright headers, etc.

For Tiki, we created an SBOM generator because we manage hundreds of dependencies (direct and indirect): https://dev.tiki.org/item8157-Software-Bill-of-Materials-SBOM-becoming-mandatory-for-Tiki

Cypht is much simpler so we don't need advanced tooling. But it should be easy to see the list of dependencies and every few months, we should review and update them.

When possible, let's try to converge dependency selection in collaboration with the Tiki Wiki CMS project.

<!-- gh-comment-id:3236841564 --> @marclaporte commented on GitHub (Aug 29, 2025): Also, please harmonize the content of https://github.com/cypht-org/cypht/tree/master/third_party Version number, copyright headers, etc. For Tiki, we created an SBOM generator because we manage hundreds of dependencies (direct and indirect): https://dev.tiki.org/item8157-Software-Bill-of-Materials-SBOM-becoming-mandatory-for-Tiki Cypht is much simpler so we don't need advanced tooling. But it should be easy to see the list of dependencies and every few months, we should review and update them. When possible, let's try to converge dependency selection in collaboration with the Tiki Wiki CMS project. - https://doc.tiki.org/Cypht-in-Tiki-vs-Cypht-standalone - https://github.com/cypht-org/cypht/issues/897
Author
Owner

@marclaporte commented on GitHub (Sep 1, 2025):

One tricky one: https://github.com/cypht-org/cypht/issues/1136

<!-- gh-comment-id:3240694983 --> @marclaporte commented on GitHub (Sep 1, 2025): One tricky one: https://github.com/cypht-org/cypht/issues/1136
Author
Owner

@bienvenuushindi commented on GitHub (Sep 3, 2025):

I will look at it👍

<!-- gh-comment-id:3247527108 --> @bienvenuushindi commented on GitHub (Sep 3, 2025): I will look at it👍
Author
Owner

@marclaporte commented on GitHub (Oct 1, 2025):

@bienvenuushindi Many of the updates of https://github.com/cypht-org/cypht/tree/master/third_party should be easy. Can you ask a less busy dev to help you?

<!-- gh-comment-id:3358516317 --> @marclaporte commented on GitHub (Oct 1, 2025): @bienvenuushindi Many of the updates of https://github.com/cypht-org/cypht/tree/master/third_party should be easy. Can you ask a less busy dev to help you?
Author
Owner

@marclaporte commented on GitHub (Oct 21, 2025):

Does https://github.com/cypht-org/cypht/blob/master/composer.lock need a refresh?

<!-- gh-comment-id:3426696021 --> @marclaporte commented on GitHub (Oct 21, 2025): Does https://github.com/cypht-org/cypht/blob/master/composer.lock need a refresh?
Author
Owner

@bienvenuushindi commented on GitHub (Oct 30, 2025):

We're all set, no refresh needed

<!-- gh-comment-id:3466497054 --> @bienvenuushindi commented on GitHub (Oct 30, 2025): We're all set, no refresh needed
Author
Owner

@marclaporte commented on GitHub (Oct 30, 2025):

Anything left here or we can close?

<!-- gh-comment-id:3467261870 --> @marclaporte commented on GitHub (Oct 30, 2025): Anything left here or we can close?
Author
Owner

@bienvenuushindi commented on GitHub (Oct 30, 2025):

Checklist Cypht dependencies

Note:

  • third_party/NProgress couldn’t be updated to the latest version because the new release is distributed as an ES Module (ESM), which relies on import and export syntax. Cypht’s JavaScript loader, however, only supports classic scripts loaded via <script src="...">

This can be closed

<!-- gh-comment-id:3468762928 --> @bienvenuushindi commented on GitHub (Oct 30, 2025): # Checklist Cypht dependencies - [X] Still used? - [X] With latest stable version? - [X] Alphabetically sorted in lists? - [x] Active ? [Kindeditor getting replaced here](https://github.com/cypht-org/cypht/issues/1136) ## Note: - [third_party/NProgress](https://github.com/cypht-org/cypht/blob/master/third_party/nprogress.js) couldn’t be updated to the latest version because the new release is distributed as an ES Module (ESM), which relies on import and export syntax. Cypht’s JavaScript loader, however, only supports classic scripts loaded via `<script src="...">` This can be closed
Sign in to join this conversation.
No milestone
No project
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference
starred/cypht#686
No description provided.