argumentcomputer / argumentcomputer/ix
Bincode dependency unmaintained
- Dominant language
- Rust
- Stars
- 93
- Forks
- 3
- Avg merge
- 21h 7m
- Merged PRs (30d)
- 45
Description
Bincode is now unmaintained per https://git.sr.ht/~stygianentity/bincode/tree/v3.0/item/README.md, we should switch to https://github.com/anza-xyz/wincode as a drop-in or https://github.com/rkyv/rkyv for potentially better performance. https://github.com/argumentcomputer/multi-stark needs to switch as well.
Until then we should allow `RUSTSEC-2025-0141` in https://github.com/argumentcomputer/ix/blob/main/deny.toml#L72
Contributor guide
No contributing guide indexed for this repository
Research direction
Start by reviewing deny.toml at the linked advisory entry and the bincode, wincode, and rkyv project pages. Check how bincode is used in ix and the linked multi-stark project; done means selecting and migrating to a maintained replacement across the affected projects, rather than only allowing RUSTSEC-2025-0141.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- rust
- Domain
- security
- Issue type
- Refactor
- Difficulty
- 4/5
- Estimated time
- 3-5 days
- Activity status
- Stale
- Clarity
- Mostly clear
- Newbie friendliness
- 35/100