brave / brave/constellation

RUSTSEC-2025-0141: Bincode is unmaintained

Open
#148 0 comments 0 reactions 0 assignees View on GitHub
Dominant language
Rust
Stars
6
Forks
4
PR merge metrics
No merged PRs in 30d

Description

> Bincode is unmaintained

| Details | |
| ------------------- | ---------------------------------------------- |
| Status | unmaintained |
| Package | `bincode` |
| Version | `1.3.3` |
| URL | [https://git.sr.ht/~stygianentity/bincode/tree/v3.0/item/README.md](https://git.sr.ht/~stygianentity/bincode/tree/v3.0/item/README.md) |
| Date | 2025-12-16 |

Due to a doxxing and harassment incident, the bincode team has taken the decision to cease development permanently.

The team considers version 1.3.3 a complete version of bincode that is not in need of any updates.

## Alternatives to consider

* [wincode](https://crates.io/crates/wincode)
* [postcard](https://crates.io/crates/postcard)
* [bitcode](https://crates.io/crates/bitcode)
* [rkyv](https://crates.io/crates/rkyv)

See [advisory page](https://rustsec.org/advisories/RUSTSEC-2025-0141.html) for additional details.

Contributor guide

No contributing guide indexed for this repository

Research direction

Start by locating where the Rust project depends on bincode 1.3.3 and reviewing the RUSTSEC-2025-0141 advisory. Compare the listed alternatives against the project's serialization needs and determine what tests or compatibility checks define a complete resolution; the issue does not name files or a specific replacement.

Written by the indexing model from the issue text.

Assessment

Tech stack
rust
Domain
security
Issue type
Bug
Difficulty
5/5
Estimated time
Over a week
Activity status
Stale
Clarity
Needs clarification
Newbie friendliness
20/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.