Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Maintenance status #57

Open
pinkforest opened this issue Oct 24, 2022 · 1 comment
Open

Maintenance status #57

pinkforest opened this issue Oct 24, 2022 · 1 comment

Comments

@pinkforest
Copy link

Hiya @softprops wonder if you would be happy for people be using this crate still or whether it is deprecated ?

I know the API is very stable and people really love to use this where people looking for the magical 1.0.0 release :)

Also just wondering if any potentially - not saying there is - but any soundness issues if these arise would be still looked up ?

e.g. there is some community push to address some possible outstanding issue with PR:

It would be nice if you could spare a moment to look into the above ❤️

Cheers
@pinkforest pinkforest mentioned this issue Oct 24, 2022
Merged
@niluxv niluxv mentioned this issue Nov 2, 2022
Closed
etehtsea added a commit to etehtsea/spin that referenced this issue Dec 11, 2022
@etehtsea
chore: Replace atty with is-terminal
d21756f 
Refs:
- softprops/atty#57
- clap-rs/clap#4249
- rustsec/advisory-db#1457
- rust-lang/rust#98070

Signed-off-by: Konstantin Shabanov <mail@etehtsea.me>
@etehtsea etehtsea mentioned this issue Dec 11, 2022
Merged
@pablogmorales pablogmorales mentioned this issue Apr 10, 2023
Closed
primeos-work added a commit to primeos-work/butido that referenced this issue Jul 31, 2023
@primeos-work
Replace the unmaintained "atty" crate with "is-terminal"
99fc97a 
The "atty" crate is unmaintained [0] and also causes a low severity
GitHub advisory (GHSA-g98v-hv3f-hcfr; only affects windows though) [1]:
> A Pull Request with a fix has been provided over a year ago but the
> maintainer seems to be unreachable.
> Last release of atty was almost 3 years ago.

The "clap" crate already switched to "is-terminal" [2] so we can simply
use the latter without having to pull in additional dependencies.
The "is-terminal" crate can also be considered a successor [3]:
> This crate is derived from the atty crate with PR 51 bug fix and PR 54
> port to windows-sys applied.

[0]: softprops/atty#57
[1]: https://github.com/science-computing/butido/security/dependabot/9
[2]: clap-rs/clap#4249
[3]: https://crates.io/crates/is-terminal
primeos-work added a commit to primeos-work/butido that referenced this issue Jul 31, 2023
@primeos-work
Replace the unmaintained "atty" crate with "is-terminal"
fd4a11a 
The "atty" crate is unmaintained [0] and also causes a low severity
GitHub advisory (GHSA-g98v-hv3f-hcfr; only affects windows though) [1]:
> A Pull Request with a fix has been provided over a year ago but the
> maintainer seems to be unreachable.
> Last release of atty was almost 3 years ago.

The "clap" crate already switched to "is-terminal" [2] so we can simply
use the latter without having to pull in additional dependencies.
The "is-terminal" crate can also be considered a successor [3]:
> This crate is derived from the atty crate with PR 51 bug fix and PR 54
> port to windows-sys applied.

[0]: softprops/atty#57
[1]: https://github.com/science-computing/butido/security/dependabot/9
[2]: clap-rs/clap#4249
[3]: https://crates.io/crates/is-terminal

Signed-off-by: Michael Weiss <michael.weiss@atos.net>
@neithernut neithernut mentioned this issue Nov 12, 2023
Closed
donaldducky added a commit to donaldducky/advent-of-code that referenced this issue Aug 24, 2024
@donaldducky
Upgrade clap to remove atty...
7cccd66 
- unmaintained package: softprops/atty#57
- security issue:
https://rustsec.org/advisories/RUSTSEC-2021-0145.html
@jayvdb
Copy link

jayvdb commented Sep 23, 2024

Note maintainer has added 5bfdbe9 added this to the README.md

This is crate is no longer maintained and users are encouraged to prefer
the equivalant functionality of std.io.IsTerminal, introduced in Rust 1.70.0

@jayvdb jayvdb mentioned this issue Sep 23, 2024
Closed
@github-actions github-actions bot mentioned this issue Sep 26, 2024
Open
@vicanso vicanso mentioned this issue Sep 26, 2024
Open
This was referenced Sep 26, 2024
Open
Open
Open
Open
Open
Open
Open
Open
Open
Open
Open
Open
Open
Open
Open
Open
Closed
taiki-e added a commit to openrr/urdf-viz that referenced this issue Oct 1, 2024
@taiki-e
Ignore RUSTSEC-2024-0375
c8638ac 
```
error[unmaintained]: `atty` is unmaintained
   ┌─ /home/runner/work/urdf-viz/urdf-viz/Cargo.lock:16:1
   │
16 │ atty 0.2.14 registry+https://github.com/rust-lang/crates.io-index
   │ ━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━ unmaintained advisory detected
   │
   ├ ID: RUSTSEC-2024-0375
   ├ Advisory: https://rustsec.org/advisories/RUSTSEC-2024-0375
   ├ The maintainer of `atty` has [published](softprops/atty@5bfdbe9) an official notice that the crate is no longer
     under development, and that users should instead rely on the functionality in the standard library's [`IsTerminal`](https://doc.rust-lang.org/std/io/trait.IsTerminal.html) trait.
     
     ## Alternative(s)
     
     - [std::io::IsTerminal](https://doc.rust-lang.org/stable/std/io/trait.IsTerminal.html) - Stable since Rust 1.70.0 and the recommended replacement per the `atty` maintainer.
     - [is-terminal](https://crates.io/crates/is-terminal) - Standalone crate supporting Rust older than 1.70.0
   ├ Announcement: softprops/atty#57
   ├ Solution: No safe upgrade is available!
   ├ atty v0.2.14
     └── clap v2.34.0
         └── structopt v0.3.26
             └── urdf-viz v0.46.0
                 └── urdf-viz-wasm v0.0.0
```
This was referenced Oct 1, 2024
Open
Closed
Open
Open
Open
Open
Open
Closed
This was referenced Oct 10, 2024
Open
Closed
Open
Open
Open
This was referenced Oct 20, 2024
Closed
Closed
Closed
This was referenced Nov 1, 2024
Open
Open
This was referenced Nov 13, 2024
Open
Open
Open
Closed
This was referenced Nov 23, 2024
Open
Open
Open
This was referenced Dec 11, 2024
Open
Open
Open
Closed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees
No one assigned
Labels
None yet
Projects
None yet
Milestone
No milestone
Development

No branches or pull requests
2 participants
@jayvdb @pinkforest