kwctl icon indicating copy to clipboard operation
kwctl copied to clipboard

RUSTSEC-2021-0139: ansi_term is Unmaintained

Open github-actions[bot] opened this issue 2 years ago • 2 comments

ansi_term is Unmaintained

Details
Status unmaintained
Package ansi_term
Version 0.12.1
URL https://github.com/ogham/rust-ansi-term/issues/72
Date 2021-08-18

The maintainer has adviced this crate is deprecated and will not receive any maintenance.

The crate does not seem to have much dependencies and may or may not be ok to use as-is.

Last release seems to have been three years ago.

Possible Alternative(s)

The below list has not been vetted in any way and may or may not contain alternatives;

See advisory page for additional details.

github-actions[bot] avatar Aug 20 '22 02:08 github-actions[bot]

This issue tracks both kwctl (this repo) and policy-server (which also has https://github.com/kubewarden/policy-server/issues/309 opened).

viccuad avatar Aug 22 '22 08:08 viccuad

We pull this crate via:

  • tracing-subscriber v0.3.15: Tracker issue there: https://github.com/tokio-rs/tracing/issues/2282
  • mdcat v0.28.0: No upstream tracker issue. Opened: https://codeberg.org/flausch/mdcat/issues/205#issuecomment-607252

Since it's not a highly sensitive advisory, I will wait to see how upstream evolves.

viccuad avatar Aug 22 '22 08:08 viccuad

Closing, we don't have this dependency anymore

flavio avatar Jun 27 '23 13:06 flavio