RUSTSEC-2025-0141: Bincode is unmaintained
Open
Nobody has claimed this yet.
- Dominant language
- Rust
- Stars
- 204
- Forks
- 98
- PR merge metrics
- No merged PRs in 30d
Description
| Details | |
|---|---|
| Package | bincode |
| Version | 1.3.3 |
| Warning | unmaintained |
| URL | https://git.sr.ht/~stygianentity/bincode/tree/v3.0/item/README.md |
| Patched Versions | n/a |
Due to a doxxing and harassment incident, the bincode team has taken the decision to cease development permanently.
The team considers version 1.3.3 a complete version of bincode that is not in need of any updates.
Alternatives to consider
Contributor guide
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
Research direction
Start by locating the bincode 1.3.3 dependency in the SDK's dependency manifests and reviewing how it is used. Compare the listed alternatives—wincode, postcard, bitcode, and rkyv—and determine whether a replacement is feasible; done means the unmaintained dependency is addressed or the project records a justified decision to retain it.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- rust
- Domain
- backend, security
- Issue type
- Bug
- Difficulty
- 4/5
- Estimated time
- 3-5 days
- Activity status
- Stale
- Clarity
- Needs clarification
- Newbie friendliness
- 25/100