Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Deny: yaml-rust is unmaintained #1

Open
rdcm opened this issue Sep 6, 2024 · 1 comment
Open

Deny: yaml-rust is unmaintained #1

rdcm opened this issue Sep 6, 2024 · 1 comment
Assignees
Labels
enhancement New feature or request

Comments

@rdcm
Copy link
Owner

rdcm commented Sep 6, 2024

Config library config = "0.14.0" depend on rust-yaml unmaintained library:

error[unmaintained]: yaml-rust is unmaintained.
    │
322 │ yaml-rust 0.4.5 registry+https://github.com/rust-lang/crates.io-index
    │ ━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━ unmaintained advisory detected
    │
    ├ ID: RUSTSEC-2024-0320
    ├ Advisory: https://rustsec.org/advisories/RUSTSEC-2024-0320
    ├ The maintainer seems [unreachable](https://github.com/chyh1990/yaml-rust/issues/197).
      
      Many issues and pull requests have been submitted over the years
      without any [response](https://github.com/chyh1990/yaml-rust/issues/160).

This section in deny.toml must be removed:

[advisories]
ignore = ["RUSTSEC-2024-0320"] # https://rustsec.org/packages/yaml-rust.html
@rdcm rdcm added the enhancement New feature or request label Sep 6, 2024
@rdcm rdcm self-assigned this Sep 6, 2024
@rdcm
Copy link
Owner Author

rdcm commented Sep 6, 2024

Merged, but not released:
rust-cli/config-rs#567

@rdcm rdcm changed the title Replace config library Deny: yaml-rust is unmaintained Sep 6, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
enhancement New feature or request
Projects
None yet
Development

No branches or pull requests

1 participant