Reason
Irreconcilable security issues. See T334895: XSS via Graph extension.

To-do list

• This task
  • Add maintainers of that extension as subscribers to this task (if they have no apparent Phabricator account, notify them on-wiki or via email if possible and note it here).
  • Add Phabricator project MediaWiki-extensions-Graph as a tag for this task, and remove MediaWiki-extensions-Other as appropriate.
• On-wiki documentation
  • Archive documentation on mediawiki.org https://www.mediawiki.org/wiki/Extension:Graph: replace page contents with {{Archived extension|last revision id before archiving|task=T405550}}.
  • If documentation page was translatable, remove <translate>, visit Special:PageTranslation, and click "remove from translation" (if you don't have the translation administrator right, ask a user who does).
  • Update Wikidata item https://www.wikidata.org/wiki/Q21677460 associated with documentation page
    • add statement Abandonware (Q281039) to instance of (P31) together with qualifier start time (P580) = the YYYY-MM-DD date that you decided to archive extension (generally per edit history)
    • add qualifier end time (P582) = the YYYY-MM-DD (same date as above) to instance of (P31) = MediaWiki extension (Q6805426)
• Phabricator
  • Mark all Phabricator tasks for the extension either Declined or Invalid. Add a comment pointing to this task when doing so for reference.
  • Archive Phabricator project MediaWiki-extensions-Graph for the extension.
  • Edit Phabricator project MediaWiki-extensions-Graph description for the extension with a link to this ticket.
• Translatewiki.net/translations
  • If the extension is deployed on Wikimedia sites, but it is known that it's not going to receive significant feature updates or deployed to new wikis, make sure that its project ids (usually "ext-extensionname") appear in the groups/MediaWiki/WikimediaLegacyAgg.yaml file in the translatewiki Gerrit repository and not in WikimediaMainAgg.yaml, WikimediaAdvancedAgg.yaml, etc. (If it also has an api group, it should remain in WikimediaTechnicalAgg.yaml).
  • If the extension is no longer deployed on Wikimedia sites, remove it from all Wikimedia*Agg.yaml. (If it was ever deployed, by this time, it's most likely in WikimediaLegacyAgg.yaml or WikimediaTechnicalAgg.yaml.)
  • If the extension is going to be completely archived and no longer developed, remove it completely from translatewiki.net by making sure that its project IDs don't appear in any of the following files:
    • groups/MediaWiki/ExtensionsAgg.yaml
    • groups/MediaWiki/mediawiki-extensions.txt
    • repoconfig.yaml
    • mw-config/validation-exclusion-list.php
• Configuration/tests/integrations/etc.
  • Remove tests in integration/config (zuul/layout.yaml).
  • Remove manifest/other references from mediawiki/vagrant if they exist.
  • Remove from https://doc.wikimedia.org/cover-extensions/ if present (requires Continuous-Integration-Infrastructure shell user to delete directly from the server).
• Repositories
  • Remove from mediawiki/extensions (along with in .gitmodules).
  • Mark the repository read-only in Gerrit (also edit description to prepend "[ARCHIVED]" and a reference to this task, remove all access lists and reparent on All-Archived-Projects): https://gerrit.wikimedia.org/g/mediawiki/extensions/Graph
  • Deactivate the Diffusion repository for the extension: https://phabricator.wikimedia.org/diffusion/EGRA/
  • Delete the GitHub mirror: https://github.com/wikimedia/mediawiki-extensions-graph