Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

RUSTSEC-2020-0168: mach is unmaintained #243

Closed
github-actions bot opened this issue Mar 17, 2023 · 2 comments · Fixed by #251
Closed

RUSTSEC-2020-0168: mach is unmaintained #243

github-actions bot opened this issue Mar 17, 2023 · 2 comments · Fixed by #251
Assignees
Milestone

Comments

@github-actions
Copy link

mach is unmaintained

Details
Status unmaintained
Package mach
Version 0.3.2
URL fitzgen/mach#63
Date 2020-07-14

Last release was almost 4 years ago.

Maintainer(s) seem to be completely unreachable.

Possible Alternative(s)

These may or may not be suitable alternatives and have not been vetted in any way;

See advisory page for additional details.

@tatsuya6502
Copy link
Member

tatsuya6502 commented Mar 31, 2023

mach is used by quanta v0.10.x for macOS and iOS targets:

$ cargo tree -i mach --all-features --target aarch64-apple-darwin
mach v0.3.2
└── quanta v0.10.1
    └── moka v0.10.1

It is not used for other platforms:

$ cargo tree -i mach --all-features --target x86_64-unknown-linux-gnu
warning: nothing to print.

quanta v0.11.0 has been released and it uses mach2:

https://github.com/metrics-rs/quanta/blob/v0.11.0/Cargo.toml#L53-L57

tatsuya6502 added a commit that referenced this issue Apr 1, 2023
This version depends on `mach2` crate for macOS/iOS targets as a replacement of
unmaintained `mach`. (See #243)
@tatsuya6502 tatsuya6502 self-assigned this Apr 1, 2023
@tatsuya6502 tatsuya6502 added this to the v0.10.2 milestone Apr 1, 2023
tatsuya6502 added a commit that referenced this issue Apr 1, 2023
This version depends on `mach2` crate for macOS/iOS targets as a replacement of
unmaintained `mach`. (See #243)
@tatsuya6502 tatsuya6502 pinned this issue Apr 4, 2023
@tatsuya6502
Copy link
Member

This issue was addressed in Moka v0.10.2. We upgraded quanta crate to v0.11.0 (#251), which uses mach2 instead of mach.

tatsuya6502 added a commit that referenced this issue Jul 2, 2023
This version depends on `mach2` crate for macOS/iOS targets as a replacement of
unmaintained `mach`. (See #243)
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging a pull request may close this issue.

1 participant