bob: drop

[katexochen]

There wasn't any reaction on benchkram/bob#387

Things done

• Built on platform:
  • x86_64-linux
  • aarch64-linux
  • x86_64-darwin
  • aarch64-darwin
• Tested, as applicable:
  • NixOS tests in nixos/tests.
  • Package tests at passthru.tests.
  • Tests in lib/tests or pkgs/test for functions and "core" functionality.
• Ran nixpkgs-review on this PR. See nixpkgs-review usage.
• Tested basic functionality of all binary files, usually in ./result/bin/.
• Nixpkgs Release Notes
  • Package update: when the change is major or breaking.
• NixOS Release Notes
  • Module addition: when adding a new NixOS module.
  • Module update: when the change is significant.
• Fits CONTRIBUTING.md, pkgs/README.md, maintainers/README.md and other READMEs.

---

Add a 👍 reaction to pull requests you find important.

[iedame]

The latest release was on April 20, 2023.

While I noticed that previous vulnerabilities were patched and backported, I agree with dropping this package. Upstream has not issued a new release containing these security fixes for over a year, and now additional vulnerabilities require patching. At this point, the maintenance burden and security risk outweigh the benefit of keeping it in Nixpkgs.