stackabletech / stackabletech/postgresql-trino-gateway
RUSTSEC-2025-0134: rustls-pemfile is unmaintained
Nobody has claimed this yet.
- Dominant language
- Rust
- Stars
- 0
- Forks
- 2
- Avg merge
- 3d 24m
- Merged PRs (30d)
- 3
Description
rustls-pemfile is unmaintained
| Details | |
|---|---|
| Status | unmaintained |
| Package | rustls-pemfile |
| Version | 2.2.0 |
| URL | https://github.com/rustls/pemfile/issues/61 |
| Date | 2025-11-28 |
The rustls-pemfile crate is no longer maintained. The repository has been archived since August
2025, and users are encouraged to depend directly on the underlying PEM parsing code included
in rustls-pki-types since 1.9.0. The latest version of rustls-pemfile is in fact a thin wrapper
around the same code used in rustls-pki-types, so migrating should be straightforward.
The new API is represented by the PemObject trait, which provides methods for
reading a single or multiple PEM objects from a file or byte slice.
See advisory page for additional details.
Contributor guide
No contributing guide indexed for this repository
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
Research direction
The issue names rustls-pemfile 2.2.0 and the rustls-pki-types PemObject API, but no repository files. First locate the rustls-pemfile dependency and its usages, then compare them with the documented PemObject methods. Done means the old dependency is removed, the replacement works, and the repository’s Rust checks or tests pass.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- rust
- Domain
- security
- Issue type
- Refactor
- Difficulty
- 3/5
- Estimated time
- 1-2 days
- Activity status
- Quiet
- Clarity
- Mostly clear
- Newbie friendliness
- 65/100