On a scale from 1 to 10, how dead is this project?

[RustyHacksaw]

I've seen very minimal work on fixing issues/checkins and now there's a security vulnerability exposed via semantic kernel inclusion ... has microsoft abandoned work on this monstrosity?

This is the security vulnerability: GHSA-2ww3-72rp-wpp4 - any plans to fix this anytime soon?

[aniruddhaadak80]

From my point of view, the frustration in threads like this usually comes from missing support-status clarity more than from one vulnerability alone. If the project is still actively evolving, maintainers should say very plainly what is supported, what is deprecated, and how security fixes versus larger roadmap work are being prioritized.

A short statement on current ownership, vulnerability handling, and whether users should stay on v1 or plan away from it would probably lower the temperature a lot.