Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

RUSTSEC-2024-0370: proc-macro-error is unmaintained #2171

Open
github-actions bot opened this issue Sep 6, 2024 · 5 comments
Open

RUSTSEC-2024-0370: proc-macro-error is unmaintained #2171

github-actions bot opened this issue Sep 6, 2024 · 5 comments
Assignees

Comments

@github-actions
Copy link
Contributor

github-actions bot commented Sep 6, 2024

proc-macro-error is unmaintained

Details
Status unmaintained
Package proc-macro-error
Version 1.0.4
URL https://gitlab.com/CreepySkeleton/proc-macro-error/-/issues/20
Date 2024-09-01

proc-macro-error's maintainer seems to be unreachable, with no commits for 2 years, no releases pushed for 4 years, and no activity on the GitLab repo or response to email.

proc-macro-error also depends on syn 1.x, which may be bringing duplicate dependencies into dependant build trees.

Possible Alternative(s)

See advisory page for additional details.

@AurelienFT AurelienFT self-assigned this Oct 21, 2024
@AurelienFT
Copy link
Contributor

Need to update : https://github.com/kas-gui/impl-tools
And : https://github.com/fnichol/names that is using an old version of clap using proc-macro-error. This crate is used by https://github.com/grafana/pyroscope-rs that we use (and needs to be updated also when names will be.

@AurelienFT
Copy link
Contributor

PR in impl-tools : kas-gui/impl-tools#41

@AurelienFT
Copy link
Contributor

Impl-tools PR merged new version 0.10.1 remove the usage of proc-macro-error. Need to change names.

@MitchTurner
Copy link
Member

@AurelienFT

What do you mean by

Need to change names.

Is this easier to fix now?

@AurelienFT
Copy link
Contributor

The crate names need update but seems really not maintained anymore.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

2 participants