search

rustsec / advisory-db

Security advisory database for Rust crates published through crates.io
https://rustsec.org
Other
918 stars 364 forks source link

Add the 'obsolete' field in the advisories #289

Closed sbs2001 closed 3 years ago

sbs2001 commented 4 years ago

https://github.com/RustSec/advisory-db/blob/aa789b9cbd6a03c860c7a1f508cb60ae9f22e3eb/crates/plutonium/RUSTSEC-2020-0011.toml#L5 has the field obsolete , upon grepping the repo, I found this as the only advisory containing this field.

If it is planned to add this field in the schema , please add that to README , that would be very helpful detail for us at https://github.com/nexB/vulnerablecode as we are essentially consuming this repo. Thanks.

tarcieri commented 4 years ago

I've been thinking about renaming this field to yanked, as it were...

tarcieri commented 4 years ago

You might also check out #240, which is a pretty big (proposed) change to the advisory format

sbs2001 commented 4 years ago

@tarcieri thank you very much, that is really a valuable information, (our project essentially breaks after these schema changes :P ) I see the schema would be freezed after implementing V3 advisory format, that would be really great. Thanks again.

Shnatsel commented 3 years ago

This has been implemented, although apparently it remains undocumented (#928). Closing.