Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

derivative is unmaintained RUSTSEC-2024-0388 #334

Open
c-git opened this issue Jan 14, 2025 · 0 comments
Open

derivative is unmaintained RUSTSEC-2024-0388 #334

c-git opened this issue Jan 14, 2025 · 0 comments

Comments

@c-git
Copy link
Contributor

c-git commented Jan 14, 2025

Hi,

Thank you very much for this crate. Not sure if you're already aware but it seems derivative is unmaintained. Depending on how it's used that may not be a problem in the short term but just wanted to bring it to your attention. For anyone else who is checking if an issue exists I'm going to include the output from cargo deny below.

warning[unmaintained]: `derivative` is unmaintained; consider using an alternative
   ┌─ /home/one/bazooka_bot/Cargo.lock:44:1
   │
44 │ derivative 2.2.0 registry+https://github.com/rust-lang/crates.io-index
   │ ---------------------------------------------------------------------- unmaintained advisory detected
   │
   = ID: RUSTSEC-2024-0388
   = Advisory: https://rustsec.org/advisories/RUSTSEC-2024-0388
   = The [`derivative`](https://crates.io/crates/derivative) crate is no longer maintained.
     Consider using any alternative, for instance:
     - [derive_more](https://crates.io/crates/derive_more)
     - [derive-where](https://crates.io/crates/derive-where)
     - [educe](https://crates.io/crates/educe)
   = Announcement: https://github.com/mcarton/rust-derivative/issues/117
   = Solution: No safe upgrade is available!
   = derivative v2.2.0
     └── poise v0.6.1
         └── bazooka-bot v0.6.0-dev
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant