search

lunatic-solutions / submillisecond

A lunatic web framework
MIT License
912 stars 18 forks source link

RUSTSEC-2021-0139: ansi_term is Unmaintained #106

Open github-actions[bot] opened 1 year ago

github-actions[bot] commented 1 year ago

ansi_term is Unmaintained

Details
Status unmaintained
Package ansi_term
Version 0.12.1
URL https://github.com/ogham/rust-ansi-term/issues/72
Date 2021-08-18

The maintainer has adviced that this crate is deprecated and will not receive any maintenance.

The crate does not seem to have much dependencies and may or may not be ok to use as-is.

Last release seems to have been three years ago.

Possible Alternative(s)

The below list has not been vetted in any way and may or may not contain alternatives;

Dependency Specific Migration(s)

See advisory page for additional details.

tqwewe commented 1 year ago

Based on the alternatives mentioned, I think console seems the most popular and maintained one of them all.

This is the only blocker for now: https://github.com/console-rs/console/issues/154

bkolobara commented 1 year ago

In the lunatic-log crate I merged a PR that switches to yansi: https://github.com/lunatic-solutions/lunatic-log-rs/pull/7.

Maybe we should use the same here? Automatic detection can't work either way in WASI, there is no API that allows you to look up what OS/terminal you are running on.

We could always default to one and then dynamically re-encode escape characters on windows during the "write(0, ...)" calls. However, this would be a bit too much work at the moment.