RUSTSEC-2024-0370: proc-macro-error is unmaintained

[github-actions[bot]]

proc-macro-error is unmaintained

Details
Status	unmaintained
Package	proc-macro-error
Version	1.0.4
URL	https://gitlab.com/CreepySkeleton/proc-macro-error/-/issues/20
Date	2024-09-01

proc-macro-error's maintainer seems to be unreachable, with no commits for 2 years, no releases pushed for 4 years, and no activity on the GitLab repo or response to email.

proc-macro-error also depends on syn 1.x, which may be bringing duplicate dependencies into dependant build trees.

Possible Alternative(s)

• proc-macro-error2

See advisory page for additional details.

[flavio]

This is a transitive dependency of oci-spec. I've opened an issue upstream

[flavio]

https://github.com/kubewarden/policy-server/pull/1320