-
Notifications
You must be signed in to change notification settings - Fork 20
Open
Description
I would like to raise a couple of concerns about Valkyrie::ChangeSet.
- The libraries that it is based on -- [reform](https://github.com/trailblazer/reform and disposable -- ceased development a few years ago. While this does not appear to be an immediate issue by itself, I think it's a potentially major vulnerability, and I would like to see an alternative implementation for that reason. Valkyrie already requires activemodel, do ActiveModel::Dirty might be a good option, at least for the change tracking part, which leads me to ...
- There seems to be issues with change tracking of properties for embedded Valkyrie::Resource objects. I am finding that
change_set.changed?returnsfalseandchange_set.changedreturns a hash with attribute keys andfalsevalues -- however,saveworks to persist the changes. Change tracking is important to our project, and it seems that reform/disposable are not reliable for the kinds of data that we are persisting. It is possible, I suppose, that user error is an issue, but that takes me back to point 1. The functionality involved here is in a secondary dependency and browsing the code of disposable gives the impression of a somewhat incomplete/abandoned effort (lots of TODO and FIXME at https://github.com/trailblazer/trailblazer-disposable/blob/master/lib/trailblazer/disposable/twin.rb, last updated 7y ago).
I am interested in whether others share these concerns or have different perspectives on the issues.
Thanks!
Metadata
Metadata
Assignees
Labels
No labels