bytecodealliance / wasmtime

A fast and secure runtime for WebAssembly
https://wasmtime.dev/
Apache License 2.0
15.42k stars 1.3k forks source link

RUSTSEC-2024-0384: `instant` is unmaintained #9591

Open github-actions[bot] opened 1 week ago

github-actions[bot] commented 1 week ago

instant is unmaintained

Details
Status unmaintained
Package instant
Version 0.1.13
URL []()
Date 2024-09-01

This crate is no longer maintained, and the author recommends using the maintained web-time crate instead.

See advisory page for additional details.

alexcrichton commented 1 week ago

This is a transitive dependency of the egg crate used by wasm-mutate which is exclusively used during fuzzing. Fixing this will require updating egg in the wasm-tools repository, so this is likely not going to be super actionable for awhile but also isn't too too worrisome.