search

wnfs-wg / rs-wnfs

Rust implementation of the WebNative FileSystem (WNFS) specification
https://github.com/wnfs-wg
Apache License 2.0
145 stars 23 forks source link

RUSTSEC-2024-0370: proc-macro-error is unmaintained #455

Closed github-actions[bot] closed 1 month ago

github-actions[bot] commented 2 months ago

proc-macro-error is unmaintained

Details
Status unmaintained
Package proc-macro-error
Version 1.0.4
URL https://gitlab.com/CreepySkeleton/proc-macro-error/-/issues/20
Date 2024-09-01

proc-macro-error's maintainer seems to be unreachable, with no commits for 2 years, no releases pushed for 4 years, and no activity on the GitLab repo or response to email.

proc-macro-error also depends on syn 1.x, which may be bringing duplicate dependencies into dependant build trees.

Possible Alternative(s)

See advisory page for additional details.

matheus23 commented 1 month ago

This is in our dependency tree due to multihash-derive. There's no version of multihash-derive that switched to proc-macro-error2 as far as I can tell.