Annual Working Bee

[ricksbrown]

By early 2022

• Check open issues
• Check open PRs

CLEANUP - address security issues found by Nexus IQ

• Dependency upgrades (via qa-parent - also needs love)
• Other dep upgrades JS and JAVA
• Remove LDE from main codebase
• Check other maven modules make sense - move non-deployable examples, examples-lde, test-lib, lde move to another repo? Keep core nice and lean!

OPTIONAL

• Nexus IQ (free for open source) instead of Sonar for security

[ricksbrown]

Regarding the Dependabot warning about dojo.setObject - we do not actually use Dojo - we just steal three files from it:

• has.js
• global.js
• sniff.js

The affected dojo code is not included so I have dismissed this alert.