> Should maintainers of all core apache libs just remove or disable features they don’t like, when not known to be insecure? I'd bet more will start doing so.

> Should maintainers of all core apache libs just remove or disable features they don’t like, when not known to be insecure? I'd bet more will start doing so. If nobody is excited to keep the feature up and any unloved code contains risks, getting rid of it seems fine to me. If companies want that code maintained, they can pay up or get one of their people to do it.