Dependency: Stem is unmaintained!

[kkarhan]

Hi,
as per your FAQ Nyx requires Stem 1.5.4. or later, but as per Stem Project Website it is mostly unmaintained.

Given that one may want to actually use Nyx, using something that hasn't been updated in over a year and likely will break as Python updates versions, this seems to be a foreseeable issue IMHO.

The pileup of unreplied & uncommented issues in stem's GitHub seems to be a warning sign...

---

I don't know of any good solution to this.

Maybe a newly written tool is necessary?
After all, tor-arm was the predecessor...

Personally I'd prefer a statically-linked, self-containing binary with no outside dependencies (aside from Tor obviously!) so it and tor could be installed onto any embedded operating system and / or provided as reproduceably build binary via the repo and package manager of it.

Thanks for your time.

[MikeBishop]

In fairness, nyx has not released a new version in 4 years. One might get the impression that nyx is also unmaintained.

[atagar]

Yes. Nyx and Stem are both unmaintained. I'm the author of both and ceased development of both at the same time.

[kkarhan]

Thx @atagar - and whilst I don't know why [and it's honestly none of my business!] said projects are unmaintained, I'd hope we'd find some solution.

My suggestion boils down to two options:

1. Finding a new maintainer - @torproject-git may want to do a callout on social media (i.e. fediverse) to find one.
2. Set this project into archive and deprecate it just like gettor, and it's web frontend.

I'm neither the maintainer of this org nor repro and thus I'd just point out these obvious ones, so feel free to do something else if you see fit.

I'd just recommend to be upfront about it being Abandonware at this point.

I've also noted this in Stem's issues as well and no matter what is being done with nyx and/or stem I do sincerely hope they get either maintained or archived so people like me who find them interesting will get a clear indication that they are unmaintained and thus should refrain from using them!

[atagar]

Stem is upfront about its development status (see its front page). None the less, it's still the only game in town for a Python controller library that implements Tor's whole control-spec.

Finding a proper maintainer is far easier said than done. I wrote both projects over the course of a decade. Nobody ever stepped up enough to be a viable maintainer. If someone ever does then I'd suggest looking at: torproject/stem#97

[Skelp]

Finding a proper maintainer is far easier said than done.

Plus, we don't want to rush things, appoint a new maintainer and end up in an xz-ssh-situation again.