Most of March the last month has been taken up by the continuing audit of the code base (OpenSAML chiefly now) for unstated or incorrectly expressed null constraints to tighten up the code and address various lurking bugs and inconsistencies. These kinds of changes often involve subtle changes to the public API so they have to be done in major releases, and so we have limited windows to do this sort of cleanup. One of the open questions is what to do with the XACML code in the library, which has never been used by the project in any capacity. Cleaning all that up is not work we can justify, but leaving it in place doesn’t sit right either, so it may end up removed from the library and published somehow in an unsupported capacity for anyone that needs it.
...