bitvec icon indicating copy to clipboard operation
bitvec copied to clipboard

wyz dependency

Open kornelski opened this issue 3 years ago • 0 comments

This crate is quite popular (congrats!) but it depends on the wyz crate, which is a rather odd collection of random bits of code. The wyz crate also has a super-outdated typemap in its "garbage" dependencies, which indirectly pulls in unmaintained and insecure traitobject dependency. As a result a vulnerable dead crate appears in Cargo.lock of thousands of crates, and this upsets vulnerability scanners.

Can you drop the wyz dependency?

kornelski avatar Sep 23 '22 10:09 kornelski