saveoursecrets / sdk

High-level, cross-platform SDK for a local-first, distributed encrypted database that can be used to build password managers, cryptocurrency wallets or other applications that require storing secrets securely.
GNU Affero General Public License v3.0
7 stars 0 forks source link

RUSTSEC-2024-0370: proc-macro-error is unmaintained #557

Open github-actions[bot] opened 2 months ago

github-actions[bot] commented 2 months ago

proc-macro-error is unmaintained

Details
Status unmaintained
Package proc-macro-error
Version 1.0.4
URL https://gitlab.com/CreepySkeleton/proc-macro-error/-/issues/20
Date 2024-09-01

proc-macro-error's maintainer seems to be unreachable, with no commits for 2 years, no releases pushed for 4 years, and no activity on the GitLab repo or response to email.

proc-macro-error also depends on syn 1.x, which may be bringing duplicate dependencies into dependant build trees.

Possible Alternative(s)

See advisory page for additional details.

tmpfs commented 1 month ago

This has been ignored in deny.toml for now, we need age to update i18n-embed-fl and for that transient dependency to update to proc-macro-error2 - this will probably take a long time.