NLnetLabs / krill

RPKI Certificate Authority and Publication Server written in Rust
https://nlnetlabs.nl/projects/routing/krill/
Mozilla Public License 2.0
294 stars 42 forks source link

RUSTSEC-2018-0015: term is looking for a new maintainer #497

Open github-actions[bot] opened 3 years ago

github-actions[bot] commented 3 years ago

term is looking for a new maintainer

Details
Status unmaintained
Package term
Version 0.5.2
URL https://github.com/Stebalien/term/issues/93
Date 2018-11-19

The author of the term crate does not have time to maintain it and is looking for a new maintainer.

Some maintained alternatives you can potentially switch to instead, depending on your needs:

See advisory page for additional details.

ximon18 commented 3 years ago

We don't depend on term directly, it comes in through a dependency, so we're dependent on the dependencies updating to something other than term:

$ cargo tree -i -p term
term v0.7.0
├── ascii-canvas v3.0.0
│   └── lalrpop v0.19.6
│       [build-dependencies]
│       ├── basic-cookies v0.1.4
│       │   └── krill v0.9.2-rc2 (/home/ximon/src/krill)
│       └── polar-core v0.12.4
│           └── oso v0.12.4
│               └── krill v0.9.2-rc2 (/home/ximon/src/krill)
└── lalrpop v0.19.6 (*)

Latest versions of basic-cookies and oso still depend on lalrpop v0.19.6 and so this issue is not currently resolvable on our side. (switching away from basic-cookies might be possible, but oso is a big and fairly unique library that would be a major change to move away from).