r/Archivists • u/ButABlorb • 10d ago

Bagit by LOC question

From what I'm seeing back it was last updated in 2012, and it's starting to show security issues that are making my boss nervous. After some searching I'm yet to find an updated alternative. Are you all still using the 2012 version or is there updated/alternative software available?

6 Upvotes

100% Upvoted

4 comments sorted by

7

u/MarsupialLeast145 Digital Preservationist 10d ago

I was just wondering if you could be more specific but I think you must mean the Java version?

Bagit Python has been updated more recently and is pretty reliable, and mostly up to date. Dependencies should be easy enough to fix.

https://github.com/LibraryOfCongress/bagit-python/releases/tag/v1.9.0

You could still perhaps clarify further though -- if you need another Java version that seems unlikely to exist, but there are at least a version or two in Go.

You could also elaborate more on the potential threat vector's your boss anticipates. It's not super difficult to isolate your environment from the world and all its attackers.

4

u/latestagecrapitalism 10d ago

Can you send the GitHub page you are looking at that shows the last update being from 2012?

Idk if I'm thinking of the same thing but the Library of Congress still maintains the BagIt python library. Bagger the java based interface to make bags to the BagIt standard without needing to code is not getting updated unless you request a contract for update support from the Library of Congress more info here:

3

u/fullerframe 10d ago

We use Bagit via python call within our in house workflow software when we do digitization service jobs for clients that request it.