Now injecting /v2/context into the store API
#814
Security advisories found
5 unmaintained, 1 unsound
Details
Warnings
RUSTSEC-2021-0139
ansi_term is Unmaintained
| Details | |
|---|---|
| Status | unmaintained |
| Package | ansi_term |
| Version | 0.12.1 |
| URL | ogham/rust-ansi-term#72 |
| Date | 2021-08-18 |
The maintainer has advised that this crate is deprecated and will not receive any maintenance.
The crate does not seem to have much dependencies and may or may not be ok to use as-is.
Last release seems to have been three years ago.
Possible Alternative(s)
The below list has not been vetted in any way and may or may not contain alternatives;
Dependency Specific Migration(s)
RUSTSEC-2024-0375
attyis unmaintained
| Details | |
|---|---|
| Status | unmaintained |
| Package | atty |
| Version | 0.2.14 |
| URL | softprops/atty#57 |
| Date | 2024-09-25 |
The maintainer of atty has published an official notice that the crate is no longer
under development, and that users should instead rely on the functionality in the standard library's IsTerminal trait.
Alternative(s)
- std::io::IsTerminal - Stable since Rust 1.70.0 and the recommended replacement per the
attymaintainer. - is-terminal - Standalone crate supporting Rust older than 1.70.0
RUSTSEC-2021-0141
dotenv is Unmaintained
| Details | |
|---|---|
| Status | unmaintained |
| Package | dotenv |
| Version | 0.15.0 |
| URL | dotenv-rs/dotenv#74 |
| Date | 2021-12-24 |
dotenv by description is meant to be used in development or testing only.
Using this in production may or may not be advisable.
Alternatives
The below may or may not be feasible alternative(s):
RUSTSEC-2024-0384
instantis unmaintained
| Details | |
|---|---|
| Status | unmaintained |
| Package | instant |
| Version | 0.1.13 |
| Date | 2024-09-01 |
This crate is no longer maintained, and the author recommends using the maintained web-time crate instead.
RUSTSEC-2024-0320
yaml-rust is unmaintained.
| Details | |
|---|---|
| Status | unmaintained |
| Package | yaml-rust |
| Version | 0.4.5 |
| URL | rustsec/advisory-db#1921 |
| Date | 2024-03-20 |
The maintainer seems unreachable.
Many issues and pull requests have been submitted over the years
without any response.
Alternatives
Consider switching to the actively maintained yaml-rust2 fork of the original project:
RUSTSEC-2021-0145
Potential unaligned read
| Details | |
|---|---|
| Status | unsound |
| Package | atty |
| Version | 0.2.14 |
| URL | softprops/atty#50 |
| Date | 2021-07-04 |
On windows, atty dereferences a potentially unaligned pointer.
In practice however, the pointer won't be unaligned unless a custom global allocator is used.
In particular, the System allocator on windows uses HeapAlloc, which guarantees a large enough alignment.
atty is Unmaintained
A Pull Request with a fix has been provided over a year ago but the maintainer seems to be unreachable.
Last release of atty was almost 3 years ago.
Possible Alternative(s)
The below list has not been vetted in any way and may or may not contain alternatives;
- std::io::IsTerminal - Stable since Rust 1.70.0
- is-terminal - Standalone crate supporting Rust older than 1.70.0