Is this project abandoned?

[ecederstrand]

Hi @tiran

I have some open issues and unmerged pull requests here that have had no reaction. Just wondering if I should continue to contribute fixes, or if this project has been abandoned?

[tiran]

Yes, the project is pretty much abandoned. The next versions of CPython 2.7, 3.6, and 3.7 as well as expat 2.3.0 will contain all necessary fixes.

[mscuthbert]

The Python 3.9.2 docs seem to indicate that the Python XML modules are still vulnerable to internal billion laughs and quadratic blowup checks -- is this not the case?