FuelLabs / fuel-core

Rust full node implementation of the Fuel v2 protocol.
Other
58.02k stars 2.78k forks source link

RUSTSEC-2024-0370: proc-macro-error is unmaintained #2171

Open github-actions[bot] opened 1 month ago

github-actions[bot] commented 1 month ago

proc-macro-error is unmaintained

Details
Status unmaintained
Package proc-macro-error
Version 1.0.4
URL https://gitlab.com/CreepySkeleton/proc-macro-error/-/issues/20
Date 2024-09-01

proc-macro-error's maintainer seems to be unreachable, with no commits for 2 years, no releases pushed for 4 years, and no activity on the GitLab repo or response to email.

proc-macro-error also depends on syn 1.x, which may be bringing duplicate dependencies into dependant build trees.

Possible Alternative(s)

See advisory page for additional details.

AurelienFT commented 2 days ago

Need to update : https://github.com/kas-gui/impl-tools And : https://github.com/fnichol/names that is using an old version of clap using proc-macro-error. This crate is used by https://github.com/grafana/pyroscope-rs that we use (and needs to be updated also when names will be.

AurelienFT commented 2 days ago

PR in impl-tools : https://github.com/kas-gui/impl-tools/pull/41

AurelienFT commented 2 days ago

Impl-tools PR merged new version 0.10.1 remove the usage of proc-macro-error. Need to change names.