search

alexcrichton / xz2-rs

Bindings to liblzma in Rust (xz streams in Rust)
Apache License 2.0
81 stars 49 forks source link

Is this repository still maintained? #128

Open VorpalBlade opened 3 weeks ago

VorpalBlade commented 3 weeks ago

There has been no updates in the recent years to this repo. Not even in response to the xz attack earlier this year. There are several outstanding pull requests with no feedback on.

Is this repository still maintained, or should I prefer using lzma-rs (which unfortunately only claims to have partial support for xz, the file format I need to deal with)?

alexcrichton commented 2 weeks ago

I try to be around for any major issues such as a known vulnerability in the C dependency. Otherwise though I'm not actively maintaining this. That's sort of self-apparenty due to the lack of activity however. I'm led to believe that the version of the xz C library used by this repository is old enough it wasn't affected by the xz attack.