RUSTSEC-2021-0127: serde_cbor is unmaintained

bincode-org / bincode

A binary encoder / decoder implementation in Rust.

MIT License

2.65k stars 265 forks source link

RUSTSEC-2021-0127: serde_cbor is unmaintained #442

Open github-actions[bot] opened 2 years ago

github-actions[bot] commented 2 years ago

serde_cbor is unmaintained

Details
Status	unmaintained
Package	`serde_cbor`
Version	`0.11.2`
URL	https://github.com/pyfisch/cbor
Date	2021-08-15

The serde_cbor crate is unmaintained. The author has archived the github repository.

Alternatives proposed by the author:

ciborium minicbor

See advisory page for additional details.

VictorKoenders commented 2 years ago

Seems to be a dependency pulled in by criterion

Tracking issue: https://github.com/bheisler/criterion.rs/issues/534

Xuanwo commented 1 year ago

The latest version of criterion.rs has removed this dep. We can do a version bump to fix this. I'm willing to open a PR for this if it looks good to you.