Skip to content

Bump clap from 4.5.29 to 4.5.30 (#67) #83

Bump clap from 4.5.29 to 4.5.30 (#67)

Bump clap from 4.5.29 to 4.5.30 (#67) #83

GitHub Actions / Security audit succeeded Feb 18, 2025 in 0s

Security advisories found

2 unmaintained, 1 unsound

Details

Warnings

RUSTSEC-2024-0388

derivative is unmaintained; consider using an alternative

Details
Status unmaintained
Package derivative
Version 2.2.0
URL mcarton/rust-derivative#117
Date 2024-06-26

The derivative crate is no longer maintained.
Consider using any alternative, for instance:

RUSTSEC-2020-0036

failure is officially deprecated/unmaintained

Details
Status unmaintained
Package failure
Version 0.1.8
URL rust-lang-deprecated/failure#347
Date 2020-05-02

The failure crate is officially end-of-life: it has been marked as deprecated
by the former maintainer, who has announced that there will be no updates or
maintenance work on it going forward.

The following are some suggested actively developed alternatives to switch to:

RUSTSEC-2019-0036

Type confusion if private_get_type_id is overridden

Details
Status unsound
Package failure
Version 0.1.8
URL rust-lang-deprecated/failure#336
Date 2019-11-13

Safe Rust code can implement malfunctioning __private_get_type_id__ and cause
type confusion when downcasting, which is an undefined behavior.

Users who derive Fail trait are not affected.