The point is that the most prolific maintainers and developers will be focused on the newer code and can't realistically support three completely different versions at one time, so they will stop paying attention to the oldest one. It's very very hard to support two versions at once, let alone three, and it's not just core, but all the contrib modules -- who will support three versions of all of them?<br>
<br>Sure, anyone who wants to can step up and provide support for the older version, but it will be a *few* people providing support, and probably not for all modules, and as things break or develop security problems, more and more of them will stop getting fixed. So it will become more and more of a problem to be stuck on the older code.<br>
<br>This is the way all software works. Software developed by organizations that pay their maintainers can keep support more older versions than software that is dependent on community support, but all of them have to cut off support for older versions at some point. <br>
<br>If you don't have a system to stay up to date with the current code, what happens if some really ugly security hole develops or something critical breaks and there is no one available who can or knows how to fix it? If your web site is at all important to your business (and when would it not be?) you can't take that kind of chance with it. Whatever the cost of upgrading is, it's less than the cost of losing your web site.<br>
<br>Karen<br><br><div class="gmail_quote">On Sun, Mar 29, 2009 at 6:43 AM, Fred Jones <span dir="ltr"><<a href="mailto:fredthejonester@gmail.com">fredthejonester@gmail.com</a>></span> wrote:<br><blockquote class="gmail_quote" style="border-left: 1px solid rgb(204, 204, 204); margin: 0pt 0pt 0pt 0.8ex; padding-left: 1ex;">
>> When D7 gets released, the community will support D7 and D6.<br>
>><br>
>> D5 support will be dropped at that juncture.<br>
><br>
> Who gets to say what "the community" will do?<br>
><br>
> Because Drupal has expanded a lot over recent years and has been adopted by<br>
> some big sites - surely there is a stronger argument than in the past for<br>
> longer term support.<br>
><br>
> So maybe the existing security team won't take it on - but if there are<br>
> enough people in the community who do want to support D5 for longer then I<br>
> can't see why anyone else in the community would want to prevent this.<br>
<br>
I have wondered the same thing. How many more D5 sites are there than<br>
D4? A factor of 10, 100 or 1000? Very hard to say I think but there<br>
are a few facts about core downloads at least here<br>
<a href="http://buytaert.net/drupal-download-statistics-2008" target="_blank">http://buytaert.net/drupal-download-statistics-2008</a><br>
<br>
Whatever that figure is, there certainly tens if not hundreds of<br>
thousands of D5 sites out there, and as mentioned, many of them are<br>
large sites owned by large entities. My guess is that a very large<br>
percentage, if not the majority, do not have a strong interest in<br>
upgrading. That's just my guess.<br>
<br>
Fred<br>
_______________________________________________<br>
consulting mailing list<br>
<a href="mailto:consulting@drupal.org">consulting@drupal.org</a><br>
<a href="http://lists.drupal.org/mailman/listinfo/consulting" target="_blank">http://lists.drupal.org/mailman/listinfo/consulting</a><br>
<br>
<br>
</blockquote></div><br>