Is this repo maintained?

[qba73]

Hi, this repo has more than 50 open PRs dating 2024/2022.

• Could someone from the community that oversees the project confirm that it's maintained please?
• Does the project need more contributors?
• What are the plans?

[yevchuk-kostiantyn]

Hi @qba73, there is a proposal to archive the notary - notaryproject/.github#70.

The general recommendation is to move from DCT/notary to Notation (https://github.com/notaryproject/notation).
Reasoning is pretty much like you said - ~50 PRs opened, several security concerns, the roadmap to move to notation etc.

Main concerns are that some projects/companies (DockerHub, Microsoft etc.) use it the production, however based on the issue's discussion, MS started their migration and plans to retire DCT/notary by March 2028; waiting for a reply from the Docker team.

Archiving the repository will sort out some confusions on it's maintenance status and engineers will have a clear understanding that this repository is no longer maintained (read-only) and moving to Notation is the next stage.

Thanks!

[yevchuk-kostiantyn]

CC: @yizha1