-
Notifications
You must be signed in to change notification settings - Fork 143
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Is this crate maintained? #197
Comments
I have tried contacting the author on that matter on the 23rd of January but have not yet received a response. I have also contacted crates.io (out of curiosity) to know whether this issue had already happen and if an action was taken. They will not transfer ownership of a crate without approval of the author (which is understandable), and they suggested development to be revived through a new crate (whether a fork or not) and that people should update their dependencies. |
Hi @Ethiraric! Thanks for the quick response! |
`yaml-rust` crate is unmaintained 1) `syntect` author won't update this dep to a fork of it due to lack of trust concerns with this new fork: trishume/syntect#526 2) cargo-deny produces this output: error[unmaintained]: yaml-rust is unmaintained. ┌─ /home/nazmul/github/r3bl-open-core/Cargo.lock:295:1 │ 295 │ yaml-rust 0.4.5 registry+https://github.com/rust-lang/crates.io-index │ --------------------------------------------------------------------- unmaintained advisory detected │ = ID: RUSTSEC-2024-0320 = Advisory: https://rustsec.org/advisories/RUSTSEC-2024-0320 = The maintainer seems [unreachable](chyh1990/yaml-rust#197). Many issues and pull requests have been submitted over the years without any [response](chyh1990/yaml-rust#160). ## Alternatives Consider switching to the actively maintained `yaml-rust2` fork of the original project: - [yaml-rust2](https://github.com/Ethiraric/yaml-rust2) - [yaml-rust2 @ crates.io](https://crates.io/crates/yaml-rust2)) = Announcement: rustsec/advisory-db#1921 = Solution: No safe upgrade is available! = yaml-rust v0.4.5 └── syntect v5.1.0 └── r3bl_tui v0.5.2 └── r3bl-cmdr v0.0.11
`yaml-rust` crate is unmaintained 1) `syntect` author won't update this dep to a fork of it due to lack of trust concerns with this new fork: trishume/syntect#526 2) cargo-deny produces this output: error[unmaintained]: yaml-rust is unmaintained. ┌─ /home/nazmul/github/r3bl-open-core/Cargo.lock:295:1 │ 295 │ yaml-rust 0.4.5 registry+https://github.com/rust-lang/crates.io-index │ --------------------------------------------------------------------- unmaintained advisory detected │ = ID: RUSTSEC-2024-0320 = Advisory: https://rustsec.org/advisories/RUSTSEC-2024-0320 = The maintainer seems [unreachable](chyh1990/yaml-rust#197). Many issues and pull requests have been submitted over the years without any [response](chyh1990/yaml-rust#160). ## Alternatives Consider switching to the actively maintained `yaml-rust2` fork of the original project: - [yaml-rust2](https://github.com/Ethiraric/yaml-rust2) - [yaml-rust2 @ crates.io](https://crates.io/crates/yaml-rust2)) = Announcement: rustsec/advisory-db#1921 = Solution: No safe upgrade is available! = yaml-rust v0.4.5 └── syntect v5.1.0 └── r3bl_tui v0.5.2 └── r3bl-cmdr v0.0.11
* Moved deprecated .cargo/config to config.toml * Ignore clippy warning * Updated body_reader and channel dependencies * Updated config-wasm and hdr-histogram dependencies * Updated additional dependencies - Held back hyper, http, and yansi due to major changes * Updated Yansi to latest version - Converted Paint::disable to Yansi::disable - Removed Windows specific code. Yansi now will try to enable on Windows and automatically disables if it can't activate. * Added build test-server to the PR script and workflow * Fix dependency loop with ahash on itself - tkaitchuck/aHash#95 (comment) - rustwasm/wasm-bindgen#3031 (comment) * Updated yaml-rust to use yaml-rust2 due to deprecation - chyh1990/yaml-rust#197 - chyh1990/yaml-rust#160 (comment) * Updated cargo deny to remove deprecated entries - EmbarkStudios/cargo-deny#611 - https://embarkstudios.github.io/cargo-deny/checks/licenses/cfg.html#the-clarify-field-optional * Updated cargo lock file * Updated code for deprecations - Added tests for create_date_diff, then updated deprecated calls and confirmed tests still passed * Added clippy ignore large results and errors * Fixed tests to validate to UTC - Since the PR flow runs on UTC, updated the local PR script to also run UTC - Updated the create_date_diff test to validate UTC and print a warning to run UTC if it fails
* Moved deprecated .cargo/config to config.toml * Ignore clippy warning * Updated body_reader and channel dependencies * Updated config-wasm and hdr-histogram dependencies * Updated additional dependencies - Held back hyper, http, and yansi due to major changes * Updated Yansi to latest version - Converted Paint::disable to Yansi::disable - Removed Windows specific code. Yansi now will try to enable on Windows and automatically disables if it can't activate. * Added build test-server to the PR script and workflow * Fix dependency loop with ahash on itself - tkaitchuck/aHash#95 (comment) - rustwasm/wasm-bindgen#3031 (comment) * Updated yaml-rust to use yaml-rust2 due to deprecation - chyh1990/yaml-rust#197 - chyh1990/yaml-rust#160 (comment) * Updated cargo deny to remove deprecated entries - EmbarkStudios/cargo-deny#611 - https://embarkstudios.github.io/cargo-deny/checks/licenses/cfg.html#the-clarify-field-optional * Updated cargo lock file * Updated code for deprecations - Added tests for create_date_diff, then updated deprecated calls and confirmed tests still passed * Added clippy ignore large results and errors * Fixed tests to validate to UTC - Since the PR flow runs on UTC, updated the local PR script to also run UTC - Updated the create_date_diff test to validate UTC and print a warning to run UTC if it fails
* Moved deprecated .cargo/config to config.toml * Ignore clippy warning * Updated body_reader and channel dependencies * Updated config-wasm and hdr-histogram dependencies * Updated additional dependencies - Held back hyper, http, and yansi due to major changes * Updated Yansi to latest version - Converted Paint::disable to Yansi::disable - Removed Windows specific code. Yansi now will try to enable on Windows and automatically disables if it can't activate. * Added build test-server to the PR script and workflow * Fix dependency loop with ahash on itself - tkaitchuck/aHash#95 (comment) - rustwasm/wasm-bindgen#3031 (comment) * Updated yaml-rust to use yaml-rust2 due to deprecation - chyh1990/yaml-rust#197 - chyh1990/yaml-rust#160 (comment) * Updated cargo deny to remove deprecated entries - EmbarkStudios/cargo-deny#611 - https://embarkstudios.github.io/cargo-deny/checks/licenses/cfg.html#the-clarify-field-optional * Updated cargo lock file * Updated code for deprecations - Added tests for create_date_diff, then updated deprecated calls and confirmed tests still passed * Added clippy ignore large results and errors * Fixed tests to validate to UTC - Since the PR flow runs on UTC, updated the local PR script to also run UTC - Updated the create_date_diff test to validate UTC and print a warning to run UTC if it fails
If not, I believe that this repository and crate should either be transferred or a fork should replace it.
If you anyone is available, can you please respond with any preferences as to how you'd prefer this crate be treated?
Thanks!
The text was updated successfully, but these errors were encountered: