Vanilla Open Source Update
Hi everyone,
We have some difficult news to share: we'll be taking down the Vanilla open source repository.
This wasn't a decision we made lightly, and we want to be upfront with you about why. The security landscape has changed quite a bit recently. AI tools can now scan codebases for known vulnerabilities much faster than before, and in some cases even chain smaller weaknesses together into exploits that wouldn't have been found previously. For a codebase that isn't being actively maintained and patched, that's a real risk, both for anyone still running it and for the wider community around it. Since we're not able to commit to ongoing maintenance right now, we felt the responsible path forward was to take the repository down rather than leave it exposed.
We know many of you have projects that depend on this code, and we don't want to leave you stranded. If that's you, please reach out to mcrouse@higherlogic.com and we'll get you a zipped package of the latest open source release.
We're genuinely sorry for the disruption this causes. Vanilla's open source community has meant so much to this platform's story, and we don't take that history lightly. We hope you understand that this comes from wanting to do right by everyone still connected to this code, even though it means an ending none of us wanted.
If you have questions, please don't hesitate to ask in the comments. We'll do our best to answer.
With appreciation,
The Higher Logic Vanilla Team