Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

RUSTSEC-2018-0015: term is looking for a new maintainer #497

Open
github-actions bot opened this issue Apr 22, 2021 · 1 comment
Open

RUSTSEC-2018-0015: term is looking for a new maintainer #497

github-actions bot opened this issue Apr 22, 2021 · 1 comment
Labels

Comments

@github-actions
Copy link

term is looking for a new maintainer

Details
Status unmaintained
Package term
Version 0.5.2
URL Stebalien/term#93
Date 2018-11-19

The author of the term crate does not have time to maintain it and is looking
for a new maintainer.

Some maintained alternatives you can potentially switch to instead, depending
on your needs:

See advisory page for additional details.

@ximon18
Copy link
Member

ximon18 commented Sep 23, 2021

We don't depend on term directly, it comes in through a dependency, so we're dependent on the dependencies updating to something other than term:

$ cargo tree -i -p term
term v0.7.0
├── ascii-canvas v3.0.0
│   └── lalrpop v0.19.6
│       [build-dependencies]
│       ├── basic-cookies v0.1.4
│       │   └── krill v0.9.2-rc2 (/home/ximon/src/krill)
│       └── polar-core v0.12.4
│           └── oso v0.12.4
│               └── krill v0.9.2-rc2 (/home/ximon/src/krill)
└── lalrpop v0.19.6 (*)

Latest versions of basic-cookies and oso still depend on lalrpop v0.19.6 and so this issue is not currently resolvable on our side. (switching away from basic-cookies might be possible, but oso is a big and fairly unique library that would be a major change to move away from).

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
Projects
Development

No branches or pull requests

1 participant