this post was submitted on 09 Dec 2025
86 points (97.8% liked)

Linux

10508 readers
971 users here now

A community for everything relating to the GNU/Linux operating system (except the memes!)

Also, check out:

Original icon base courtesy of lewing@isc.tamu.edu and The GIMP

founded 2 years ago
MODERATORS
 

In mid-September, we reported that Nick Wellnhofer, the long-time maintainer of the widely used XML parsing library libxml2, planned to step down from the project. A few days ago, that change became official.

When looking at one of the latest commits in the project’s GitLab repository, you can now see the following notice:

“This project is unmaintained and has known security issues (https://gitlab.gnome.org/GNOME/libxml2/-/issues/346). It is foolish to use this software to process untrusted data.”

top 22 comments
sorted by: hot top controversial new old
[–] bjoern_tantau@swg-empire.de 39 points 11 hours ago (1 children)

Where were you when libxml2 die?

I was at house eating dorito when Lemmy ring.

"libxml2 is kil"

"no"

I actually used it the other day to grab a value from an xml file.

[–] SantasMagicalComfort@piefed.world 13 points 10 hours ago (1 children)
[–] ikidd@lemmy.world 8 points 8 hours ago
[–] frongt@lemmy.zip 16 points 11 hours ago (6 children)

I hope this is a nail in the coffin for xml. It's just so unpleasant to work with, even through great libraries.

[–] magic_lobster_party@fedia.io 20 points 9 hours ago

Wishful thinking. XML is going to be around for a very long time.

[–] renegadespork@lemmy.jelliefrontier.net 16 points 10 hours ago* (last edited 10 hours ago) (2 children)

Don’t podcasts and RSS still rely heavily on XML?

[–] prettybunnys@piefed.social 24 points 10 hours ago (1 children)

Lots of stuff uses XML still.

[–] IHeartBadCode@fedia.io 21 points 10 hours ago (4 children)

That's super underselling it. Open Financial Exchange OFX is still the go-to for markets and banks to exchange information with various end user devices. ISO 20022 is a standard used in banking that is XML based. Fedwire, the platform that moves money between the central banks completed transition to XML in July... of this year.

Credit reporting agencies, insurance agencies, hospitals, medicare, medicaid, massive amounts of the entire global logistics industry are heavily using XML with no plans in the near future to move off of it. Like the network that handles auto insurance claims and reporting them to people like LexisNexus is all XML.

Like it's impossible to cover just how much of this planet runs on XML.

[–] elmicha@feddit.org 13 points 8 hours ago

Don't forget the OpenDocument format of LibreOffice and the other format of the other office suite. Yeah, these will be retired any day now.

Also these.

[–] prettybunnys@piefed.social 10 points 9 hours ago

Declarative structured data is super important it turns out

[–] raman_klogius@ani.social 5 points 9 hours ago* (last edited 8 hours ago)

It was in fact these non-browser interests that initially poisoned W3C to take the position of completely abandoning html for XML back in 2004... Where the browser companies immediately ignored the decision and formed their own working group (whatwg) which worked on almost all new web technologies post html4.

[–] GottaHaveFaith@fedia.io 1 points 30 minutes ago

Electrical Vehicles use EXI to communicate with chargers, which is just compressed xml

[–] 4am@lemmy.zip 7 points 5 hours ago

Every office suite document format is just a disguised ZIP archive full of XML files.

[–] expr@programming.dev 4 points 7 hours ago

It's great for non-HTML markup, like https://hyperview.org/.

A lot of the hate is undeserved. It has had awful paradigms built around it (like SOAP), but that doesn't make XML inherently bad by any means.

[–] sik0fewl@lemmy.ca 3 points 6 hours ago (1 children)

Yes, things will be so much better when we eventually replicate all of XML's functionality in JSON.

[–] The_Decryptor@aussie.zone 1 points 3 hours ago

Well we've recreated namespaces, and JSON already has a completely useless type system, so it's pretty much already there.

[–] ulterno@programming.dev 1 points 4 hours ago

Sure it is, but I don't see a good enough replacement.
Although I have only used XML a couple of times, which were in other people's projects, and considering their low complexity, they might as well have used JSON, XML does have a space where JSON is not good enough.

[–] mrbn@lemmy.ca 13 points 7 hours ago

Never bothered to check how many packages depend on libxml2. It's 418 packages that directly depends on it.

[–] onlinepersona@programming.dev 10 points 5 hours ago (1 children)

Good on Nick. Do what you want buddy, you had a good run. Go have some fun doing what you love.

Now it's time for a corporate user of libxml2 to donate resources for maintenance and bug fixing or forking it. It doesn't always have to be on the shoulders of unpaid maintainers.

[–] ulterno@programming.dev 1 points 4 hours ago (1 children)

Considering that qt6-webengine also depends upon it, I guess someone will come and pick it up soon, or maybe they will just create an alternative?

[–] onlinepersona@programming.dev 2 points 4 hours ago

My guess, it'll be rewritten in rust.