search

databendlabs / jsonb

JSONB implement in rust
Apache License 2.0
65 stars 11 forks source link

Switch from `fast-float` to `fast-float2`? #68

Closed penberg closed 3 hours ago

penberg commented 4 hours ago

Github's bot claims that fast-float has multiple soundness issues:

https://github.com/penberg/limbo/security/dependabot/5

The suggestion is to either move to fast-float2 or just use the standard library.

Xuanwo commented 4 hours ago

Thanks for raising this issue and happy to know you are using this crate! This request makes sense, I will take a look over this.

Xuanwo commented 24 minutes ago

Hi, @penberg, please try upgrade jsonb to latest version.