Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

spin-rs no longer maintained (dependency) #163

Closed
briansmith opened this issue Dec 23, 2019 · 6 comments
Closed

spin-rs no longer maintained (dependency) #163

briansmith opened this issue Dec 23, 2019 · 6 comments

Comments

@briansmith
Copy link

Quoting @bluejekyll at briansmith/ring#921:

https://rustsec.org/advisories/RUSTSEC-2019-0031

The spin dependency is no longer maintained it appears. This causes cargo audit to fail on downstream projects. I haven't had a chance to look into potential fixes.

Some (probably many) projects have a cargo audit --deny-warnings job that will now fail if they depend on lazy-static.

@GuillaumeDIDIER
Copy link

@phil-opp has developped https://crates.io/crates/spinning_top as a replacement for spin for his rust-os-dev work. Might be of use for this.

@gendx
Copy link

gendx commented Jul 6, 2020

@phil-opp has developped https://crates.io/crates/spinning_top as a replacement for spin for his rust-os-dev work. Might be of use for this.

+1 to spinning_top. What do you think about it as a replacement?

@haraldh
Copy link

haraldh commented Jul 13, 2020

Maybe also to consider: https://github.com/4lDO2/spinning-rs

@zesterer
Copy link
Contributor

FYI, spin-rs is now maintained again.

@tarcieri
Copy link

This PR should hopefully prevent spin from being reported as unmaintained:

rustsec/advisory-db#424

@KodrAus
Copy link
Contributor

KodrAus commented Nov 6, 2020

Now that spin-rs is back under active maintenance I think we can close thisone.

Thanks all!

@KodrAus KodrAus closed this as completed Nov 6, 2020
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging a pull request may close this issue.

7 participants