Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

🦺 Advisory for unmaintained crate, users #1701

Merged
merged 1 commit into from
Jun 1, 2023

Conversation

zeenix
Copy link
Contributor

@zeenix zeenix commented Jun 1, 2023

The users crate hasn't seen any action since 2020-10-08. The developer seems MIA since.

I failed to find a direct replacement that's maintained but sysinfo crate provides the same
functionality since the last release.

@tarcieri
Copy link
Member

tarcieri commented Jun 1, 2023

Our suggested waiting period for an "implicitly unmaintained" crate with an unresponsive author is 90 days. (See https:/rustsec/advisory-db/blob/main/HOWTO_UNMAINTAINED.md#creating-an-unmaintained-crate-advisory)

It looks like you opened ogham/rust-users#54 on May 3rd, so 90 days would be August 1st.

@zeenix
Copy link
Contributor Author

zeenix commented Jun 1, 2023

It looks like you opened ogham/rust-users#54 on May 3rd, so 90 days would be August 1st.

Right but there has been no activity on the repo since Oct 2020, despite people filing issues and even PRs.

@zeenix
Copy link
Contributor Author

zeenix commented Jun 1, 2023

Infact, the maintainer has not had any activity on Github since Oct 2021.

@tarcieri
Copy link
Member

tarcieri commented Jun 1, 2023

Aah, ok, indeed that would qualify then

@zeenix
Copy link
Contributor Author

zeenix commented Jun 1, 2023

@tarcieri cool, I squashed your suggested edit.

@tarcieri tarcieri merged commit 99d0a82 into rustsec:main Jun 1, 2023
@tarcieri
Copy link
Member

tarcieri commented Jun 1, 2023

Thanks!

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants