search

rust-lang-nursery / lazy-static.rs

A small macro for defining lazy evaluated static variables in Rust.
Apache License 2.0
1.9k stars 111 forks source link

spin-rs no longer maintained (dependency) #163

Closed briansmith closed 3 years ago

briansmith commented 4 years ago

Quoting @bluejekyll at https://github.com/briansmith/ring/issues/921:

https://rustsec.org/advisories/RUSTSEC-2019-0031

The spin dependency is no longer maintained it appears. This causes cargo audit to fail on downstream projects. I haven't had a chance to look into potential fixes.

Some (probably many) projects have a cargo audit --deny-warnings job that will now fail if they depend on lazy-static.

GuillaumeDIDIER commented 4 years ago

@phil-opp has developped https://crates.io/crates/spinning_top as a replacement for spin for his rust-os-dev work. Might be of use for this.

gendx commented 4 years ago

@phil-opp has developped https://crates.io/crates/spinning_top as a replacement for spin for his rust-os-dev work. Might be of use for this.

+1 to spinning_top. What do you think about it as a replacement?

haraldh commented 4 years ago

Maybe also to consider: https://github.com/4lDO2/spinning-rs

zesterer commented 3 years ago

FYI, spin-rs is now maintained again.

tarcieri commented 3 years ago

This PR should hopefully prevent spin from being reported as unmaintained:

https://github.com/RustSec/advisory-db/pull/424

KodrAus commented 3 years ago

Now that spin-rs is back under active maintenance I think we can close thisone.

Thanks all!