-
-
Notifications
You must be signed in to change notification settings - Fork 50
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Maintenance status #57
Comments
etehtsea
added a commit
to etehtsea/spin
that referenced
this issue
Dec 11, 2022
Refs: - softprops/atty#57 - clap-rs/clap#4249 - rustsec/advisory-db#1457 - rust-lang/rust#98070 Signed-off-by: Konstantin Shabanov <mail@etehtsea.me>
primeos-work
added a commit
to primeos-work/butido
that referenced
this issue
Jul 31, 2023
The "atty" crate is unmaintained [0] and also causes a low severity GitHub advisory (GHSA-g98v-hv3f-hcfr; only affects windows though) [1]: > A Pull Request with a fix has been provided over a year ago but the > maintainer seems to be unreachable. > Last release of atty was almost 3 years ago. The "clap" crate already switched to "is-terminal" [2] so we can simply use the latter without having to pull in additional dependencies. The "is-terminal" crate can also be considered a successor [3]: > This crate is derived from the atty crate with PR 51 bug fix and PR 54 > port to windows-sys applied. [0]: softprops/atty#57 [1]: https://github.com/science-computing/butido/security/dependabot/9 [2]: clap-rs/clap#4249 [3]: https://crates.io/crates/is-terminal
primeos-work
added a commit
to primeos-work/butido
that referenced
this issue
Jul 31, 2023
The "atty" crate is unmaintained [0] and also causes a low severity GitHub advisory (GHSA-g98v-hv3f-hcfr; only affects windows though) [1]: > A Pull Request with a fix has been provided over a year ago but the > maintainer seems to be unreachable. > Last release of atty was almost 3 years ago. The "clap" crate already switched to "is-terminal" [2] so we can simply use the latter without having to pull in additional dependencies. The "is-terminal" crate can also be considered a successor [3]: > This crate is derived from the atty crate with PR 51 bug fix and PR 54 > port to windows-sys applied. [0]: softprops/atty#57 [1]: https://github.com/science-computing/butido/security/dependabot/9 [2]: clap-rs/clap#4249 [3]: https://crates.io/crates/is-terminal Signed-off-by: Michael Weiss <michael.weiss@atos.net>
donaldducky
added a commit
to donaldducky/advent-of-code
that referenced
this issue
Aug 24, 2024
- unmaintained package: softprops/atty#57 - security issue: https://rustsec.org/advisories/RUSTSEC-2021-0145.html
Note maintainer has added 5bfdbe9 added this to the README.md
|
This was referenced Sep 26, 2024
taiki-e
added a commit
to openrr/urdf-viz
that referenced
this issue
Sep 30, 2024
``` error[unmaintained]: `atty` is unmaintained ┌─ /home/runner/work/urdf-viz/urdf-viz/Cargo.lock:16:1 │ 16 │ atty 0.2.14 registry+https://github.com/rust-lang/crates.io-index │ ━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━ unmaintained advisory detected │ ├ ID: RUSTSEC-2024-0375 ├ Advisory: https://rustsec.org/advisories/RUSTSEC-2024-0375 ├ The maintainer of `atty` has [published](softprops/atty@5bfdbe9) an official notice that the crate is no longer under development, and that users should instead rely on the functionality in the standard library's [`IsTerminal`](https://doc.rust-lang.org/std/io/trait.IsTerminal.html) trait. ## Alternative(s) - [std::io::IsTerminal](https://doc.rust-lang.org/stable/std/io/trait.IsTerminal.html) - Stable since Rust 1.70.0 and the recommended replacement per the `atty` maintainer. - [is-terminal](https://crates.io/crates/is-terminal) - Standalone crate supporting Rust older than 1.70.0 ├ Announcement: softprops/atty#57 ├ Solution: No safe upgrade is available! ├ atty v0.2.14 └── clap v2.34.0 └── structopt v0.3.26 └── urdf-viz v0.46.0 └── urdf-viz-wasm v0.0.0 ```
This was referenced Oct 1, 2024
taiki-e
added a commit
to openrr/urdf-viz
that referenced
this issue
Oct 1, 2024
``` error[unmaintained]: `atty` is unmaintained ┌─ /home/runner/work/urdf-viz/urdf-viz/Cargo.lock:16:1 │ 16 │ atty 0.2.14 registry+https://github.com/rust-lang/crates.io-index │ ━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━ unmaintained advisory detected │ ├ ID: RUSTSEC-2024-0375 ├ Advisory: https://rustsec.org/advisories/RUSTSEC-2024-0375 ├ The maintainer of `atty` has [published](softprops/atty@5bfdbe9) an official notice that the crate is no longer under development, and that users should instead rely on the functionality in the standard library's [`IsTerminal`](https://doc.rust-lang.org/std/io/trait.IsTerminal.html) trait. ## Alternative(s) - [std::io::IsTerminal](https://doc.rust-lang.org/stable/std/io/trait.IsTerminal.html) - Stable since Rust 1.70.0 and the recommended replacement per the `atty` maintainer. - [is-terminal](https://crates.io/crates/is-terminal) - Standalone crate supporting Rust older than 1.70.0 ├ Announcement: softprops/atty#57 ├ Solution: No safe upgrade is available! ├ atty v0.2.14 └── clap v2.34.0 └── structopt v0.3.26 └── urdf-viz v0.46.0 └── urdf-viz-wasm v0.0.0 ```
This was referenced Oct 1, 2024
This was referenced Oct 10, 2024
This was referenced Oct 20, 2024
This was referenced Nov 1, 2024
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Hiya @softprops wonder if you would be happy for people be using this crate still or whether it is deprecated ?
I know the API is very stable and people really love to use this where people looking for the magical 1.0.0 release :)
Also just wondering if any potentially - not saying there is - but any soundness issues if these arise would be still looked up ?
e.g. there is some community push to address some possible outstanding issue with PR:
It would be nice if you could spare a moment to look into the above ❤️
Cheers
The text was updated successfully, but these errors were encountered: