Remove the use of Moq or no update #14136
Replies: 3 comments
-
This is a decision that the team should make. Personally, I never mind using Moq and avoid updating the affected version |
Beta Was this translation helpful? Give feedback.
-
The Moq issue is very recent. The second people learned about the telemetry thing, a ton of people are into a panic, 'remove Moq', 'Switch to NSubtitute' blah blah modes! Let the issue's dust settle first and let us know what Moq's plans are. Moq's author lately has been explaining stuff and AFAIK, he reverted the change. |
Beta Was this translation helpful? Give feedback.
-
Orchard uses Moq v4.18.4, so not the version affected (>4.20.0). However, personally, I wouldn't like to see sponsorship requests in the build output, nor as a company owner find it suitable to ask for sponsorship connected to each developer's e-mail. |
Beta Was this translation helpful? Give feedback.
-
Is your feature request related to a problem? Please describe.
Moq 4.20 and later collects telemetry data that we do not wish to participate in:
https://www.bleepingcomputer.com/news/security/popular-open-source-project-moq-criticized-for-quietly-collecting-data/
https://yro.slashdot.org/story/23/08/09/2058205/popular-open-source-project-moq-criticized-for-quietly-collecting-data
moq/moq.spikes@6057dd2
devlooped/SponsorLink@a199a4d
Describe the solution you'd like
Remove Moq
Beta Was this translation helpful? Give feedback.
All reactions