iotaledger / iotaledger/identity

RUSTSEC-2021-0141: dotenv is Unmaintained

Open
#1,368 0 comments 0 reactions 0 assignees View on GitHub
Dominant language
Rust
Stars
346
Forks
100
Avg merge
13h 41m
Merged PRs (30d)
2

Description

> dotenv is Unmaintained

| Details | |
| ------------------- | ---------------------------------------------- |
| Status | unmaintained |
| Package | `dotenv` |
| Version | `0.15.0` |
| URL | [https://github.com/dotenv-rs/dotenv/issues/74](https://github.com/dotenv-rs/dotenv/issues/74) |
| Date | 2021-12-24 |

dotenv by description is meant to be used in development or testing only.

Using this in production may or may not be advisable.

## Alternatives

The below may or may not be feasible alternative(s):
- [dotenvy](https://crates.io/crates/dotenvy)

See [advisory page](https://rustsec.org/advisories/RUSTSEC-2021-0141.html) for additional details.

Contributor guide

Open the contributing guide

Research direction

Read the RUSTSEC-2021-0141 advisory and inspect the repository's dependency declaration for dotenv 0.15.0. Determine whether dotenvy is a feasible replacement, then verify that the project builds and its existing tests pass without the unmaintained dependency.

Written by the indexing model from the issue text.

Assessment

Tech stack
rust
Domain
security
Issue type
Bug
Difficulty
3/5
Estimated time
1-2 days
Activity status
Stale
Clarity
Mostly clear
Newbie friendliness
25/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.