www-apps/ampache suffers from several serious bugs and it seems no one is willing to maintain it. 1. Bug 449032 says that no current PHP version works with any ampache version in the tree 2. There are two security bugs left open for years. Bug 297709 is in limbo with not all arches CC'd. Bug 366689 is needing an ebuild for 3 years now. 3. There are other smaller bugs which date back to 2010. I feel someone should clean up this package with bumps and stables or it should be removed.
First thing that should happen (well, maybe 2nd after web-apps converts itself into a project c.f. upcomming GLEP67); if it isn't really maintained by web-apps they should drop the package to maintainer-wanted/needed and announce it in case others wants to pick it up.
Is web-apps even active or looking for this? Well, I understand you concern, but people will also be able to take the package if needed as soon as they get the usual hardmasking message with the 30 days timeout. The problem is that, usually, packages get forgotten until that message is shown, as some herds are completly understaffed or the remaining people are looking for a small subset of the packages under their umbrella :/
I'm taking over as maintainer and just bumped to 3.8.1. Lifting mask
Thanks :)