add a comment

Cuprate · Nov 1, 2024 · 779e39c · 779e39c
1 parent 53ae22f
commit 779e39c
Showing 1 changed file with 3 additions and 1 deletion.
diff --git a/deny.toml b/deny.toml
@@ -81,7 +81,9 @@ ignore = [
     #{ id = "RUSTSEC-0000-0000", reason = "you can specify a reason the advisory is ignored" },
     #"[email protected]", # you can also ignore yanked crate versions if you wish
     #{ crate = "[email protected]", reason = "you can specify why you are ignoring the yanked crate" },
-    { id = "RUSTSEC-2024-0370", reason = "you can specify a reason the advisory is ignored" }
+
+    # TODO: check this is sorted before a beta release.
+    { id = "RUSTSEC-2024-0370", reason = "unmaintained crate, not necessarily vulnerable yet." }
 ]
 # If this is true, then cargo deny will use the git executable to fetch advisory database.
 # If this is false, then it uses a built-in git library.