cloudflare / pingora

A library for building fast, reliable and evolvable network services.
Apache License 2.0
20.35k stars 1.1k forks source link

RUSTSEC-2021-0139: ansi_term is Unmaintained #84

Closed github-actions[bot] closed 1 month ago

github-actions[bot] commented 4 months ago
Details
Package ansi_term
Version 0.12.1
Warning unmaintained
URL https://github.com/ogham/rust-ansi-term/issues/72
Patched Versions n/a

The maintainer has advised that this crate is deprecated and will not receive any maintenance.

The crate does not seem to have much dependencies and may or may not be ok to use as-is.

Last release seems to have been three years ago.

Possible Alternative(s)

The below list has not been vetted in any way and may or may not contain alternatives;

Dependency Specific Migration(s)

bsodmike commented 3 months ago

Seems this is an issue with clap, which is used by structopt in many pingora crates

[[package]]
name = "clap"
version = "2.34.0"
source = "registry+https://github.com/rust-lang/crates.io-index"
checksum = "a0610544180c38b88101fecf2dd634b174a62eef6946f84dfc6a7127512b381c"
dependencies = [
 "ansi_term",
 "atty",
 "bitflags 1.3.2",
 "strsim",
 "textwrap 0.11.0",
 "unicode-width",
 "vec_map",
]