RUSTSEC-2019-0031: spin is no longer actively maintained

btcven / locha-p2p

Apache License 2.0

8 stars 1 forks source link

Closed github-actions[bot] closed 4 years ago

github-actions[bot] commented 4 years ago

spin is no longer actively maintained

Details
Status	unmaintained
Package	`spin`
Version	`0.5.2`
URL	https://github.com/mvdnes/spin-rs/commit/7516c80
Date	2019-11-21

The author of the spin crate does not have time or interest to maintain it.

Consider the following alternatives (all of which support no_std):

conquer-once
lock_api (a subproject of parking_lot)
- spinning_top spinlock crate built on lock_api
spinning

See advisory page for additional details.

jeandudey commented 4 years ago

Closing, not a security issue at all. See briansmith/ring#921

Side note: look up a way to not use ring, as that dependency uses spin.