exiv2 -- icu -- libhibernate-validator-java -- libraw -- libvorbis -- mercurial -- mupdf -- opencv -- openexr -- vlc -- imagemagick/stable -- mariadb-10.1/stable -- thunderbird/stable -- undertow/stable -- php-horde-crypt/oldstable -- python-werkzeug/oldstable -- ruby-http/oldstable -- ------ The above is a list of DSA candidates based on the tracker's information. One should evaluate the candidates and either add them to dsa-needed.txt or consider tagging them no-dsa.