Closed andrewwhitehead closed 2 years ago
The current audit failure is due to an CVE for the time
crate, that version is being brought in as a transitive dev-dependency of libsodium-ffi
(which incidentally hasn't been updated in a few years). I think this PR might fix the issue, or else it could be manually ignored.
yep .. see also https://github.com/hyperledger/ursa/pull/197 which is also blocked on the zip / time issue.
Rebased after libsodium-ffi & time crate dependency removal
Compilation currently fails when the
cl
feature is enabled due to thedigest
dependency being updated previously.Also fixed some warnings and skipped tests around the optional
serde
feature and non-existentserialization
feature.