Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Use maintained forks of dotenv(->y) & memmap(->2). #139

Merged
merged 1 commit into from
Sep 15, 2023

Conversation

jsirois
Copy link
Collaborator

@jsirois jsirois commented Sep 15, 2023

These 2 forks appear to be the blessed successors.

These unmaintained crate dependencies were revelead by a cargo audit run:

$ cargo audit
    Fetching advisory database from `https://github.com/RustSec/advisory-db.git`
      Loaded 570 security advisories (from /home/jsirois/.cargo/advisory-db)
    Updating crates.io index
    Scanning Cargo.lock for vulnerabilities (140 crate dependencies)
Crate:     dotenv
Version:   0.15.0
Warning:   unmaintained
Title:     dotenv is Unmaintained
Date:      2021-12-24
ID:        RUSTSEC-2021-0141
URL:       https://rustsec.org/advisories/RUSTSEC-2021-0141
Dependency tree:
dotenv 0.15.0
└── jump 0.12.0
    ├── scie-jump 0.12.0
    └── package 0.2.0

Crate:     memmap
Version:   0.7.0
Warning:   unmaintained
Title:     memmap is unmaintained
Date:      2020-12-02
ID:        RUSTSEC-2020-0077
URL:       https://rustsec.org/advisories/RUSTSEC-2020-0077
Dependency tree:
memmap 0.7.0
└── jump 0.12.0
    ├── scie-jump 0.12.0
    └── package 0.2.0

warning: 2 allowed warnings found

These 2 forks appear to be the blessed successors.

These unmaintained crate dependencies were revelead by a cargo audit
run:
```
$ cargo audit
    Fetching advisory database from `https://github.com/RustSec/advisory-db.git`
      Loaded 570 security advisories (from /home/jsirois/.cargo/advisory-db)
    Updating crates.io index
    Scanning Cargo.lock for vulnerabilities (140 crate dependencies)
Crate:     dotenv
Version:   0.15.0
Warning:   unmaintained
Title:     dotenv is Unmaintained
Date:      2021-12-24
ID:        RUSTSEC-2021-0141
URL:       https://rustsec.org/advisories/RUSTSEC-2021-0141
Dependency tree:
dotenv 0.15.0
└── jump 0.12.0
    ├── scie-jump 0.12.0
    └── package 0.2.0

Crate:     memmap
Version:   0.7.0
Warning:   unmaintained
Title:     memmap is unmaintained
Date:      2020-12-02
ID:        RUSTSEC-2020-0077
URL:       https://rustsec.org/advisories/RUSTSEC-2020-0077
Dependency tree:
memmap 0.7.0
└── jump 0.12.0
    ├── scie-jump 0.12.0
    └── package 0.2.0

warning: 2 allowed warnings found
```
@jsirois jsirois merged commit 6b47049 into a-scie:main Sep 15, 2023
6 checks passed
@jsirois jsirois deleted the cargo-audit/fix-unmaintaineds branch September 15, 2023 14:13
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants