Forum for discussing general topics related to Couch.
2 posts Page 1 of 1
Is it up to us, the installers of CouchCMS to be responsible for patching and updating the addons used in Couch or do you 'KK' keep on top of that and push out a new commit whenever one of those repos is updated?

Saying this particularly about PHPMailer which I had a bad experience with when a known exploit in an older version caused me a number of problems a year ago.
We upgrade periodically but definitely don't try to keep pace with their commits.
An exception is when a security patch is released - that is when we immediately update our repository too. This happened with phpMailer. The version we have currently is the patched one.
2 posts Page 1 of 1