simba
simba copied to clipboard
`paste` dependency is no longer maitained
How to reproduce
- Obtain
simba 0.9.0source code - Install
caro-audit - Run
cargo audit -Dwarningsin the crate's root
Result:
Crate: paste
Version: 1.0.15
Warning: unmaintained
Title: paste - no longer maintained
Date: 2024-10-07
ID: RUSTSEC-2024-0436
URL: https://rustsec.org/advisories/RUSTSEC-2024-0436
Dependency tree:
paste 1.0.15
└── simba 0.9.0
P.S. My crate indirectly depends on simba (via nalgerbra). My motivation to submit this issue might be a matter of taste: my CI requires cargo audit -Dwarnings to pass, which is probably too pedantic. Anyway, thank you for considering this issue, and please ask me to elaborate on my very brief report if needed.
I have the same issue.
For reference, aws-lc-rs removed paste as a dependency last month to address this issue: https://github.com/aws/aws-lc-rs/issues/722