iotaledger / iotaledger/identity
RUSTSEC-2021-0141: dotenv is Unmaintained
- Dominant language
- Rust
- Stars
- 346
- Forks
- 100
- Avg merge
- 13h 41m
- Merged PRs (30d)
- 2
Description
> dotenv is Unmaintained
| Details | |
| ------------------- | ---------------------------------------------- |
| Status | unmaintained |
| Package | `dotenv` |
| Version | `0.15.0` |
| URL | [https://github.com/dotenv-rs/dotenv/issues/74](https://github.com/dotenv-rs/dotenv/issues/74) |
| Date | 2021-12-24 |
dotenv by description is meant to be used in development or testing only.
Using this in production may or may not be advisable.
## Alternatives
The below may or may not be feasible alternative(s):
- [dotenvy](https://crates.io/crates/dotenvy)
See [advisory page](https://rustsec.org/advisories/RUSTSEC-2021-0141.html) for additional details.
Contributor guide
Research direction
Read the RUSTSEC-2021-0141 advisory and inspect the repository's dependency declaration for dotenv 0.15.0. Determine whether dotenvy is a feasible replacement, then verify that the project builds and its existing tests pass without the unmaintained dependency.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- rust
- Domain
- security
- Issue type
- Bug
- Difficulty
- 3/5
- Estimated time
- 1-2 days
- Activity status
- Stale
- Clarity
- Mostly clear
- Newbie friendliness
- 25/100