iotaledger / iotaledger/notarization

RUSTSEC-2025-0012: `backoff` is unmaintained.

Open
#338 0 comments 0 reactions 0 assignees View on GitHub
Dominant language
Rust
Stars
5
Forks
7
Avg merge
10h 34m
Merged PRs (30d)
11

Description

> `backoff` is unmaintained.

| Details | |
| ------------------- | ---------------------------------------------- |
| Status | unmaintained |
| Package | `backoff` |
| Version | `0.4.0` |
| URL | [https://github.com/ihrwein/backoff/issues/66](https://github.com/ihrwein/backoff/issues/66) |
| Date | 2025-03-04 |

The [backoff](https://crates.io/crates/backoff) crate is no longer actively maintained. For exponential backoffs/retrying, you can use the [backon](https://crates.io/crates/backon) crate.

See [advisory page](https://rustsec.org/advisories/RUSTSEC-2025-0012.html) for additional details.

Contributor guide

Open the contributing guide

Research direction

The issue identifies the unmaintained Rust crate backoff 0.4.0 and suggests backon as an alternative, but names no project files or tests. Search the repository for the backoff dependency and its usages, then run the existing project checks; done means the unmaintained crate is no longer used without breaking retry or backoff behavior.

Written by the indexing model from the issue text.

Assessment

Tech stack
rust
Domain
security
Issue type
Refactor
Difficulty
3/5
Estimated time
1-2 days
Activity status
Active
Clarity
Mostly clear
Newbie friendliness
55/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.