Re: Retrospective by 'gpg.fail' authors

[Peter Gutmann <pgut001 () cs auckland ac nz>]

Soatok Dreamseeker <soatok.dhole () gmail com> writes:

> So... why not delete it? Unmaintained code is a liability (and,
> categorically, forgotten about code is not being maintained).

Apart from the obligatory XKCD reference:

https://xkcd.com/1172/

there's the secondary problem that it's not clear which code is obsolete and/
or can be safely removed.  I was recently talking with the developer of
another well-known OSS project on issues found by frontier AI models in them
and we both mentioned that, totally unscientifically, around half of all
issues found were in code that was 20 or more years old and, at least in my
case, wasn't bugs but design decisions and tradeoffs made 20 or more years
ago.  Given that it's open source with an unknown number of downstream users
doing unknown things with it, there's no way to tell whether it's safe to
remove or not.

Peter.