iotaledger / iotaledger/identity
RUSTSEC-2025-0141: Bincode is unmaintained
- Dominant language
- Rust
- Stars
- 346
- Forks
- 100
- Avg merge
- 13h 41m
- Merged PRs (30d)
- 2
Description
> Bincode is unmaintained
| Details | |
| ------------------- | ---------------------------------------------- |
| Status | unmaintained |
| Package | `bincode` |
| Version | `1.3.3` |
| URL | [https://git.sr.ht/~stygianentity/bincode/tree/v3.0/item/README.md](https://git.sr.ht/~stygianentity/bincode/tree/v3.0/item/README.md) |
| Date | 2025-12-16 |
Due to a doxxing and harassment incident, the bincode team has taken the decision to cease development permanently.
The team considers version 1.3.3 a complete version of bincode that is not in need of any updates.
## Alternatives to consider
* [wincode](https://crates.io/crates/wincode)
* [postcard](https://crates.io/crates/postcard)
* [bitcode](https://crates.io/crates/bitcode)
* [rkyv](https://crates.io/crates/rkyv)
See [advisory page](https://rustsec.org/advisories/RUSTSEC-2025-0141.html) for additional details.
Contributor guide
Research direction
Start by reviewing the RUSTSEC-2025-0141 advisory and the bincode 1.3.3 details in this issue. Then determine how the repository depends on or uses bincode and whether one of the listed alternatives is appropriate; done means the dependency concern has a documented, verified resolution.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- rust
- Domain
- security
- Issue type
- Bug
- Difficulty
- 4/5
- Estimated time
- 3-5 days
- Activity status
- Stale
- Clarity
- Needs clarification
- Newbie friendliness
- 25/100