search

vn971 / rua

Build tool for Arch Linux providing control, review and jailed build options
GNU General Public License v3.0
421 stars 38 forks source link

RUSTSEC-2021-0139: ansi_term is Unmaintained #211

Open github-actions[bot] opened 11 months ago

github-actions[bot] commented 11 months ago

ansi_term is Unmaintained

Details
Status unmaintained
Package ansi_term
Version 0.12.1
URL https://github.com/ogham/rust-ansi-term/issues/72
Date 2021-08-18

The maintainer has advised that this crate is deprecated and will not receive any maintenance.

The crate does not seem to have much dependencies and may or may not be ok to use as-is.

Last release seems to have been three years ago.

Possible Alternative(s)

The below list has not been vetted in any way and may or may not contain alternatives;

Dependency Specific Migration(s)

See advisory page for additional details.

vn971 commented 11 months ago

To fix this, we need to stop using structopt and start using the next versions of clap that has this functionality built-in. The change will likely be more than 10-20 LoC, but definitely doable by just carefully following the docs of the new version of clap.