Apache Struts

Apache Struts is a model-view-controller web framework for Java, maintained by the Apache Software Foundation, with a core API, tag library, plugin registry, Maven archetypes, an IntelliJ IDEA plugin and published documentation covering getting started, security and developer guides. It publishes version notes, security bulletins, end-of-life version listings and commercial support options.

The security bulletins are the first thing a prospective adopter should read, and that is a statement about diligence rather than a criticism. Struts has been the subject of serious remotely exploitable vulnerabilities, at least one of which contributed to a very large breach, and the project responds by publishing bulletins and end-of-life notices clearly. An organisation running it must have a process that acts on those quickly.

Publishing end-of-life versions explicitly is good practice that many projects neglect. A team can determine whether the version it runs is still receiving fixes, which is the question that actually matters and is frequently unanswerable elsewhere.

For a new application the honest position is that this framework's era has passed, and the reason to know it is that a great deal of existing enterprise code runs on it and needs maintaining.