Maintenance status #57
Comments
etehtsea
added a commit
to etehtsea/spin
that referenced
this issue
Dec 11, 2022
Refs: - softprops/atty#57 - clap-rs/clap#4249 - rustsec/advisory-db#1457 - rust-lang/rust#98070 Signed-off-by: Konstantin Shabanov <mail@etehtsea.me>
primeos-work
added a commit
to primeos-work/butido
that referenced
this issue
Jul 31, 2023
The "atty" crate is unmaintained [0] and also causes a low severity GitHub advisory (GHSA-g98v-hv3f-hcfr; only affects windows though) [1]: > A Pull Request with a fix has been provided over a year ago but the > maintainer seems to be unreachable. > Last release of atty was almost 3 years ago. The "clap" crate already switched to "is-terminal" [2] so we can simply use the latter without having to pull in additional dependencies. The "is-terminal" crate can also be considered a successor [3]: > This crate is derived from the atty crate with PR 51 bug fix and PR 54 > port to windows-sys applied. [0]: softprops/atty#57 [1]: https://github.com/science-computing/butido/security/dependabot/9 [2]: clap-rs/clap#4249 [3]: https://crates.io/crates/is-terminal
primeos-work
added a commit
to primeos-work/butido
that referenced
this issue
Jul 31, 2023
The "atty" crate is unmaintained [0] and also causes a low severity GitHub advisory (GHSA-g98v-hv3f-hcfr; only affects windows though) [1]: > A Pull Request with a fix has been provided over a year ago but the > maintainer seems to be unreachable. > Last release of atty was almost 3 years ago. The "clap" crate already switched to "is-terminal" [2] so we can simply use the latter without having to pull in additional dependencies. The "is-terminal" crate can also be considered a successor [3]: > This crate is derived from the atty crate with PR 51 bug fix and PR 54 > port to windows-sys applied. [0]: softprops/atty#57 [1]: https://github.com/science-computing/butido/security/dependabot/9 [2]: clap-rs/clap#4249 [3]: https://crates.io/crates/is-terminal Signed-off-by: Michael Weiss <michael.weiss@atos.net>
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Hiya @softprops wonder if you would be happy for people be using this crate still or whether it is deprecated ?
I know the API is very stable and people really love to use this where people looking for the magical 1.0.0 release :)
Also just wondering if any potentially - not saying there is - but any soundness issues if these arise would be still looked up ?
e.g. there is some community push to address some possible outstanding issue with PR:
It would be nice if you could spare a moment to look into the above ❤️
Cheers
The text was updated successfully, but these errors were encountered: