I realize Kanboard is not being actively developed, as per the text on Github, but for now it suits my needs for a small but self hosted Kanban oriented project management utility.
Will probably be posting some questions over time, but wanted to check if this forum is still considered active.
Thanks… I am getting my bearings and working in my board, most is ok, some functionality is a bit weird - not saying wrong - and will post a new thread if any real questions pops up.
The main drawback right now is the aging platform and unavailable - simple - alternatives, this also reflects in plugins where most have not seen development for 3-5 years.
I like Kanban, it is a great working concept and I avoid solutions that are bloated with integrations and functions one do not need as a small homelab or individual developer.
IMHO this doesn’t say much about their quality. I wrote some plugins and contributed to others. Nowadays I maintain all my plugins for correct use with current Kanboard versions. Usually there is no need to update a plugin to keep it alive, unless the author did some wild things in it, what can break the compatibility.
I have absolutely no problem with this situation. In general, I find it preferable as if Kanboard would get a dozen new, for me mostly useless, features each quarter.
And you are probably right about many plugins, but in general they still need periodic review as their platform evolves and security expectations change. PHP is now at 8.4, and code written for 7.x or early 8.x should be reviewed against newer language behavior, deprecations, and security practices.
If a plugin is considered ‘done’, that still needs to be demonstrated over time. From my perspective, software that is neither actively maintained nor explicitly declared stable-and-verified against current platforms is effectively abandoned. That doesn’t make it bad, but it does make it a risk — and users should be told which category it belongs to.
I can mitigate some of such risks on my own systems, but far from everyone has the means or the know-how to do that
That’s true, that’s the blessing and the curse with open source.
No one of us is getting paid and we all just tread along, creating things that do what we need at a quality that suffices for our needs.
If you need security guarantees, you’ll probably have to pay for it as it requires time and effort, that at least I don’t have nor want to spend in my free time.
Then again, my instance runs behind a proxy that already intercepts most issues, so security is not a big concern for myself.
But you get access to all the code, you can help fix and improve anything, even just giving feedback might spark some new development that everyone can benefit from.