Test config with env vars (#754) #143
Security advisories found
4 unmaintained, 1 unsound
Details
Warnings
RUSTSEC-2021-0141
dotenv is Unmaintained
| Details | |
|---|---|
| Status | unmaintained |
| Package | dotenv |
| Version | 0.15.0 |
| URL | dotenv-rs/dotenv#74 |
| Date | 2021-12-24 |
dotenv by description is meant to be used in development or testing only.
Using this in production may or may not be advisable.
Alternatives
The below may or may not be feasible alternative(s):
RUSTSEC-2020-0168
mach is unmaintained
| Details | |
|---|---|
| Status | unmaintained |
| Package | mach |
| Version | 0.3.2 |
| URL | fitzgen/mach#63 |
| Date | 2020-07-14 |
Last release was almost 4 years ago.
Maintainer(s) seem to be completely unreachable.
Possible Alternative(s)
These may or may not be suitable alternatives and have not been vetted in any way;
- mach2 - direct fork
RUSTSEC-2021-0127
serde_cbor is unmaintained
| Details | |
|---|---|
| Status | unmaintained |
| Package | serde_cbor |
| Version | 0.11.2 |
| URL | https://github.com/pyfisch/cbor |
| Date | 2021-08-15 |
The serde_cbor crate is unmaintained. The author has archived the github repository.
Alternatives proposed by the author:
RUSTSEC-2024-0320
yaml-rust is unmaintained.
| Details | |
|---|---|
| Status | unmaintained |
| Package | yaml-rust |
| Version | 0.4.5 |
| URL | rustsec/advisory-db#1921 |
| Date | 2024-03-20 |
The maintainer seems unreachable.
Many issues and pull requests have been submitted over the years
without any response.
Alternatives
Consider switching to the actively maintained yaml-rust2 fork of the original project:
RUSTSEC-2021-0145
Potential unaligned read
| Details | |
|---|---|
| Status | unsound |
| Package | atty |
| Version | 0.2.14 |
| URL | softprops/atty#50 |
| Date | 2021-07-04 |
On windows, atty dereferences a potentially unaligned pointer.
In practice however, the pointer won't be unaligned unless a custom global allocator is used.
In particular, the System allocator on windows uses HeapAlloc, which guarantees a large enough alignment.
atty is Unmaintained
A Pull Request with a fix has been provided over a year ago but the maintainer seems to be unreachable.
Last release of atty was almost 3 years ago.
Possible Alternative(s)
The below list has not been vetted in any way and may or may not contain alternatives;
- std::io::IsTerminal - Stable since Rust 1.70.0
- is-terminal - Standalone crate supporting Rust older than 1.70.0