stackabletech / stackabletech/listener-operator
RUSTSEC-2021-0153: `encoding` is unmaintained
Open
Nobody has claimed this yet.
- Dominant language
- Python
- Stars
- 9
- Forks
- 2
- Avg merge
- 1d 9h
- Merged PRs (30d)
- 8
Description
encodingis unmaintained
| Details | |
|---|---|
| Status | unmaintained |
| Package | encoding |
| Version | 0.2.33 |
| URL | https://github.com/lifthrasiir/rust-encoding/issues/127 |
| Date | 2021-12-05 |
Last release was on 2016-08-28. The issue inquiring as to the status of the crate has gone unanswered by the maintainer.
Possible alternatives
See advisory page for additional details.
Contributor guide
No contributing guide indexed for this repository
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
Research direction
Start by checking the project's dependency manifests and dependency tree to find where encoding 0.2.33 is introduced. Review the linked RustSec advisory and assess whether encoding_rs can replace it; done means the unmaintained package is no longer pulled in and the project still builds and passes its tests.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- rust
- Domain
- security
- Issue type
- Bug
- Difficulty
- 4/5
- Estimated time
- 3-5 days
- Activity status
- Stale
- Clarity
- Needs clarification
- Newbie friendliness
- 35/100