iotaledger / iotaledger/notarization

RUSTSEC-2026-0247: bitmaps is unmaintained

Open
#324 0 comments 0 reactions 0 assignees View on GitHub
Dominant language
Rust
Stars
5
Forks
7
Avg merge
10h 34m
Merged PRs (30d)
11

Description

> bitmaps is unmaintained

| Details | |
| ------------------- | ---------------------------------------------- |
| Status | unmaintained |
| Package | `bitmaps` |
| Version | `2.1.0` |
| URL | [https://github.com/bodil/bitmaps](https://github.com/bodil/bitmaps) |
| Date | 2026-05-03 |

The bitmaps crate is unmaintained; all versions are affected. The GitHub
repository was archived by the owner on 2026-05-03.

Recommended alternatives:

* [fixedbitset](https://crates.io/crates/fixedbitset)
* [bitvec](https://crates.io/crates/bitvec)

See [advisory page](https://rustsec.org/advisories/RUSTSEC-2026-0247.html) for additional details.

Contributor guide

Open the contributing guide

Research direction

Start by locating the Cargo manifests and lockfile entries that bring in the bitmaps 2.1.0 crate, then inspect how the dependency is used. Compare the suggested fixedbitset and bitvec alternatives and run the repository’s existing tests after any dependency change. Done means the unmaintained bitmaps crate is no longer required and the project still passes its tests.

Written by the indexing model from the issue text.

Assessment

Tech stack
rust
Domain
security
Issue type
Bug
Difficulty
3/5
Estimated time
1-2 days
Activity status
Quiet
Clarity
Mostly clear
Newbie friendliness
55/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.