Maintenance status #57
Comments
etehtsea
added a commit
to etehtsea/spin
that referenced
this issue
Dec 11, 2022
Refs: - softprops/atty#57 - clap-rs/clap#4249 - rustsec/advisory-db#1457 - rust-lang/rust#98070 Signed-off-by: Konstantin Shabanov <mail@etehtsea.me>
primeos-work
added a commit
to primeos-work/butido
that referenced
this issue
Jul 31, 2023
The "atty" crate is unmaintained [0] and also causes a low severity GitHub advisory (GHSA-g98v-hv3f-hcfr; only affects windows though) [1]: > A Pull Request with a fix has been provided over a year ago but the > maintainer seems to be unreachable. > Last release of atty was almost 3 years ago. The "clap" crate already switched to "is-terminal" [2] so we can simply use the latter without having to pull in additional dependencies. The "is-terminal" crate can also be considered a successor [3]: > This crate is derived from the atty crate with PR 51 bug fix and PR 54 > port to windows-sys applied. [0]: softprops/atty#57 [1]: https://github.com/science-computing/butido/security/dependabot/9 [2]: clap-rs/clap#4249 [3]: https://crates.io/crates/is-terminal
primeos-work
added a commit
to primeos-work/butido
that referenced
this issue
Jul 31, 2023
The "atty" crate is unmaintained [0] and also causes a low severity GitHub advisory (GHSA-g98v-hv3f-hcfr; only affects windows though) [1]: > A Pull Request with a fix has been provided over a year ago but the > maintainer seems to be unreachable. > Last release of atty was almost 3 years ago. The "clap" crate already switched to "is-terminal" [2] so we can simply use the latter without having to pull in additional dependencies. The "is-terminal" crate can also be considered a successor [3]: > This crate is derived from the atty crate with PR 51 bug fix and PR 54 > port to windows-sys applied. [0]: softprops/atty#57 [1]: https://github.com/science-computing/butido/security/dependabot/9 [2]: clap-rs/clap#4249 [3]: https://crates.io/crates/is-terminal Signed-off-by: Michael Weiss <michael.weiss@atos.net>
donaldducky
added a commit
to donaldducky/advent-of-code
that referenced
this issue
Aug 24, 2024
- unmaintained package: softprops/atty#57 - security issue: https://rustsec.org/advisories/RUSTSEC-2021-0145.html
|
Note maintainer has added 5bfdbe9 added this to the README.md
|
This was referenced Sep 26, 2024
This was referenced Sep 29, 2024
taiki-e
added a commit
to openrr/urdf-viz
that referenced
this issue
Sep 30, 2024
``` error[unmaintained]: `atty` is unmaintained ┌─ /home/runner/work/urdf-viz/urdf-viz/Cargo.lock:16:1 │ 16 │ atty 0.2.14 registry+https://github.com/rust-lang/crates.io-index │ ━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━ unmaintained advisory detected │ ├ ID: RUSTSEC-2024-0375 ├ Advisory: https://rustsec.org/advisories/RUSTSEC-2024-0375 ├ The maintainer of `atty` has [published](softprops/atty@5bfdbe9) an official notice that the crate is no longer under development, and that users should instead rely on the functionality in the standard library's [`IsTerminal`](https://doc.rust-lang.org/std/io/trait.IsTerminal.html) trait. ## Alternative(s) - [std::io::IsTerminal](https://doc.rust-lang.org/stable/std/io/trait.IsTerminal.html) - Stable since Rust 1.70.0 and the recommended replacement per the `atty` maintainer. - [is-terminal](https://crates.io/crates/is-terminal) - Standalone crate supporting Rust older than 1.70.0 ├ Announcement: softprops/atty#57 ├ Solution: No safe upgrade is available! ├ atty v0.2.14 └── clap v2.34.0 └── structopt v0.3.26 └── urdf-viz v0.46.0 └── urdf-viz-wasm v0.0.0 ```
This was referenced Oct 1, 2024
taiki-e
added a commit
to openrr/urdf-viz
that referenced
this issue
Oct 1, 2024
``` error[unmaintained]: `atty` is unmaintained ┌─ /home/runner/work/urdf-viz/urdf-viz/Cargo.lock:16:1 │ 16 │ atty 0.2.14 registry+https://github.com/rust-lang/crates.io-index │ ━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━ unmaintained advisory detected │ ├ ID: RUSTSEC-2024-0375 ├ Advisory: https://rustsec.org/advisories/RUSTSEC-2024-0375 ├ The maintainer of `atty` has [published](softprops/atty@5bfdbe9) an official notice that the crate is no longer under development, and that users should instead rely on the functionality in the standard library's [`IsTerminal`](https://doc.rust-lang.org/std/io/trait.IsTerminal.html) trait. ## Alternative(s) - [std::io::IsTerminal](https://doc.rust-lang.org/stable/std/io/trait.IsTerminal.html) - Stable since Rust 1.70.0 and the recommended replacement per the `atty` maintainer. - [is-terminal](https://crates.io/crates/is-terminal) - Standalone crate supporting Rust older than 1.70.0 ├ Announcement: softprops/atty#57 ├ Solution: No safe upgrade is available! ├ atty v0.2.14 └── clap v2.34.0 └── structopt v0.3.26 └── urdf-viz v0.46.0 └── urdf-viz-wasm v0.0.0 ```
This was referenced Oct 1, 2024
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Hiya @softprops wonder if you would be happy for people be using this crate still or whether it is deprecated ?
I know the API is very stable and people really love to use this where people looking for the magical 1.0.0 release :)
Also just wondering if any potentially - not saying there is - but any soundness issues if these arise would be still looked up ?
e.g. there is some community push to address some possible outstanding issue with PR:
It would be nice if you could spare a moment to look into the above ❤️
Cheers
The text was updated successfully, but these errors were encountered: