DaGenix / rust-crypto

A (mostly) pure-Rust implementation of various cryptographic algorithms.
Apache License 2.0
1.38k stars 296 forks source link

Yank breaking versions with "*" deps #460

Open kornelski opened 4 years ago

kornelski commented 4 years ago

Some old versions of rust-crypto have dependencies specified with "*" version requirement (rand = "*", rustc-serialize = "*", libc = "*", gcc = "*", etc.).

Crates with such vague dependency versions became unusable, because * allows picking too-new semver-incompatible dependencies. It also breaks Cargo's minimal-versions feature, because * requirement allows picking very very old dependencies that aren't compatible with Rust 1.0.

Because these old versions of rust-crypto are unusable and cause problems for Cargo, I suggest yanking them:

cargo yank --vers 0.1.0
cargo yank --vers 0.1.1