Is this project dead?

[sahin52]

Hello, It is not being updated in nuget and as far as I see here. It doesn't even have the latest NHibernate, which doesn't have a vulnerability, instead it uses an older version of NHibernate.
Is it dead?

[fredericDelaporte]

Hello,

Most "add-on" projects of NHibernate stay compatible with its latest version, while still supporting older ones. They will not publish a new version just for having it as a dependency if they do not need to use some new features of the latest version. It is up to the consumer application to use the latest NHibernate version with them.

[fredericDelaporte]

By the way, I now realize the NHibernate vulnerability has been changed from Moderate to High seemingly by an automated bot. Sure enough, "SQL injection" looks dire. But that vulnerability requires such convoluted cases and unusual uses of NHibernate that well, most users if not all are not exposed to it, because they do not use the vulnerable features or not in a context allowing to exploit it.

(Negative value discriminators on a machine with corrupted culture settings?, ...)

[sahin52]

Can you at least update it in Nuget? Its latest update is in 2011