Summary
The Spliit script (slug: spliit) was removed via the is_deleted flag in the scripts database, motivated by #15209 ("Project Dead / Security Issues Upstream"), which reported no upstream commits since December 6, 2025.
That premise is no longer true. The upstream project has been revived and is under active development:
| Evidence |
Details |
| Latest release |
v1.22.0, published 2026-08-14 |
| Recent release cadence |
v1.20.x → v1.21.0 → v1.22.0 in recent weeks |
| Merged feature PRs |
#486 (MYR currency), #507 (MKD), #521 (COP), #557 (fix), #537 (translated page titles, merged 2026-08-18) |
| Recent commits |
Feature + dependency work on 2026-08-18/19/20 |
| Contributors |
Multiple new contributors active (marcmeee, stdmr, albariko97, BastiOfBerlin, quintushr, ...) |
Notably, the community-scripts database record for spliit itself already tracks github_data.version: 1.22.0 (last sync 2026-08-22), confirming the upstream feed is alive.
Request
Please re-evaluate the status of the Spliit script:
- Set
is_deleted = false for slug spliit, or
- As a middle ground, use
is_disabled = true with a message about the remaining security concerns (no built-in authentication), which users can still bypass consciously via var_ignore_disable.
For context: the three script files are still present and intact in this repository (ct/spliit.sh, ct/headers/spliit, install/spliit-install.sh), and their update_script() flow works correctly against current releases. Existing LXC installations currently have no supported update path.
Regarding the security concerns
The concerns from #15209 remain valid and worth documenting — Spliit still lacks an authentication layer and has open npm audit findings. However, with the project maintained again and many containers already deployed, a documented warning plus a disabled/bypass status seems more useful than a hard block.
Happy to help test or refresh the scripts if anything needs updating since #15937.
Summary
The Spliit script (
slug: spliit) was removed via theis_deletedflag in the scripts database, motivated by #15209 ("Project Dead / Security Issues Upstream"), which reported no upstream commits since December 6, 2025.That premise is no longer true. The upstream project has been revived and is under active development:
Notably, the community-scripts database record for
spliititself already tracksgithub_data.version: 1.22.0(last sync 2026-08-22), confirming the upstream feed is alive.Request
Please re-evaluate the status of the Spliit script:
is_deleted = falsefor slugspliit, oris_disabled = truewith a message about the remaining security concerns (no built-in authentication), which users can still bypass consciously viavar_ignore_disable.For context: the three script files are still present and intact in this repository (
ct/spliit.sh,ct/headers/spliit,install/spliit-install.sh), and theirupdate_script()flow works correctly against current releases. Existing LXC installations currently have no supported update path.Regarding the security concerns
The concerns from #15209 remain valid and worth documenting — Spliit still lacks an authentication layer and has open npm audit findings. However, with the project maintained again and many containers already deployed, a documented warning plus a disabled/bypass status seems more useful than a hard block.
Happy to help test or refresh the scripts if anything needs updating since #15937.