Thrift package has vulnerabilities

yarpc / yarpc-go

A message passing platform for Go

MIT License

401 stars 101 forks source link

Open vmanikes-dd opened 1 year ago

vmanikes-dd commented 1 year ago

Hey guys

Looks like this package has vulnerabilities. Any reason we are using a version from 2016? https://github.com/yarpc/yarpc-go/blob/dev/go.mod#L6