RUSTSEC-2024-0375: `atty` is unmaintained
| Details | |
|---|---|
| Package | atty |
| Version | 0.2.14 |
| Warning | unmaintained |
| URL | https://github.com/softprops/atty/issues/57 |
| Patched Versions | n/a |
The maintainer of atty has published an official notice that the crate is no longer
under development, and that users should instead rely on the functionality in the standard library's IsTerminal trait.
Alternative(s)
- std::io::IsTerminal - Stable since Rust 1.70.0 and the recommended replacement per the
attymaintainer. - is-terminal - Standalone crate supporting Rust older than 1.70.0
I guess we'd need either: (i) let the issue open or (ii) ignore the advisory when running cargo-audit until we bump the MSRV and it can be fixed, otherwise CI will keep recreating issue.
Anyway, for anyone taking a look at this one see why it's unaffected and unsolvable at the moment here: https://github.com/bitcoindevkit/bdk/issues/1769#issuecomment-2617524776
edit: I have the minimal changes for (ii) here: https://github.com/oleonardolima/bdk/tree/ci/add-RUSTSEC-2024-0375-to-ignored-list