Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Dependency instant is unmaintained #62

Open
akatsukilevi opened this issue Nov 29, 2024 · 0 comments
Open

Dependency instant is unmaintained #62

akatsukilevi opened this issue Nov 29, 2024 · 0 comments

Comments

@akatsukilevi
Copy link

According to the RUSTSEC-2024-0384:

This crate is no longer maintained, and the author recommends using the maintained web-time crate instead.

This affects the web-push library since it is a peer-dependency in the chain:

Crate:     instant
Version:   0.1.13
Warning:   unmaintained
Title:     `instant` is unmaintained
Date:      2024-09-01
ID:        RUSTSEC-2024-0384
URL:       https://rustsec.org/advisories/RUSTSEC-2024-0384
Dependency tree:
instant 0.1.13
└── fastrand 1.9.0
    └── futures-lite 1.13.0
        ├── web-push 0.10.2
        │   └── mocha_hub 0.0.1
        └── isahc 1.7.2
            └── web-push 0.10.2

One possible solution could be upgrading the isahc dependency to the latest stable version (1.7.2 as of the time of writing), opposed to the 1.4.0 currently in use

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant