meh / rust-terminfo

Terminal information for Rust.
Other
40 stars 15 forks source link

RUSTSEC-2020-0053: dirs: dirs is unmaintained, use dirs-next instead #18

Closed brightly-salty closed 1 year ago

brightly-salty commented 3 years ago

https://rustsec.org/advisories/RUSTSEC-2020-0053

Crate:         dirs
Version:       2.0.2
Warning:       unmaintained
Title:         dirs is unmaintained, use dirs-next instead
Date:          2020-10-16
ID:            RUSTSEC-2020-0053
URL:           https://rustsec.org/advisories/RUSTSEC-2020-0053
Dependency tree:
dirs 2.0.2

dirs is unmaintained, dirs-next should be used instead.

I would be willing to implement this and submit a PR if it would be accepted.

daira commented 1 year ago

The advisory now says: "This advisory has been withdrawn and should be ignored. It is kept only for reference."

dirs appears to be maintained now; it isn't very active, but the last activity is more recent than on dirs-next. However, dirs is now at version 4, whereas terminfo depends on version 2. Updating this would help to reduce duplicate crate dependencies for us.

meh commented 1 year ago

On it.

meh commented 1 year ago

Done.