advisory-db icon indicating copy to clipboard operation
advisory-db copied to clipboard

Published 20 hours ago • verified publisher icon rustsec

Add unmaintained `multi_mut`

Open pinkforest opened this issue 2 years ago • 4 comments

Fixes #1531

It has no dependants so I think unmaintained can do it ?

Ping: https://github.com/rust-lang/rust/issues/39155

pinkforest avatar Feb 01 '23 10:02 pinkforest

Thanks for putting this together!

I'd consider "unsound" a stronger warning than "unmaintained", so I'd prefer to go with that. "Unmaintained" was originally created for a crate with no known issues but maintainers MIA, rustcrypto.

Any objections? Should we update the maintainer's guide with that?

Shnatsel avatar Feb 02 '23 22:02 Shnatsel

We could have combined status for unmaintained and suspect unsound we can't get the maintainer input on ?

Otherwise it's split between two advisories or have this potential source of confusion ?

I don't mind using unsound either though.

pinkforest avatar Feb 02 '23 22:02 pinkforest

I think an advisory without a patched version is a strong enough signal that the crate isn't maintained well.

@tarcieri thoughts?

Shnatsel avatar Feb 02 '23 23:02 Shnatsel

You can file separate advisories for both issues

tarcieri avatar Apr 26 '23 00:04 tarcieri