Moment.js is a legacy project now and was flagged by our security team. Are there plans to migrate it, upgrade it or remove it? https://momentjs.com/docs/#/-project-status/
It is a dependency for Pipeline: Stage View
Also how do I contact the maintainers of the plugin directly?
We now generally consider Moment to be a legacy project in maintenance mode. It is not dead, but it is indeed done.
and
However, since we understand that Moment is well established in millions of existing projects:
We will address critical security concerns as they arise.
We will release data updates for Moment-Timezone following IANA time zone database releases.
So it is still supported for applications using it, it just will not get new features or major rewrites. So I see no need to rush for a replacement here.