dfinity / dfinity/sdk

RUSTSEC-2026-0105: core2 is unmaintained, all versions yanked

Open
#4,530 0 comments 0 reactions 0 assignees View on GitHub

Nobody has claimed this yet.

Dominant language
Rust
Stars
204
Forks
98
PR merge metrics
No merged PRs in 30d

Description

Details
Package core2
Version 0.4.0
Warning unmaintained
URL https://hachyderm.io/@piecritic/116404790999620656
Patched Versions n/a

The maintainer decided stop maintaining crate and yanked all published versions.

Potential alternatives:

Contributor guide

Open the contributing guide

First steps

  1. Read the whole issue, then the project's contributing guide.
  2. Comment on the issue to say you are picking it up — it saves two people doing the same work.
  3. Fork the repository and make your change on a branch.
  4. Open a pull request that references the issue number.

Research direction

No source file or test is named. Start by locating core2 in the Rust dependency manifests and tracing which SDK components use it; review the listed alternatives and affected build or test paths. Done criteria are not defined in the issue, so maintainer guidance is needed before choosing a replacement or documenting the dependency decision.

Written by the indexing model from the issue text.

Assessment

Tech stack
rust
Domain
build-system, security
Issue type
Bug
Difficulty
4/5
Estimated time
3-5 days
Activity status
Quiet
Clarity
Needs clarification
Newbie friendliness
35/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.