Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Add unmaintained advisory for lmdb #1142

Merged
merged 2 commits into from
Jan 5, 2022
Merged

Conversation

Jake-Shadle
Copy link
Contributor

The lmdb crate https://github.com/danburkert/lmdb-rs has been unmaintained since roughly August 2018. This prompted mozilla to fork it and create their own crate lmdb-rkv...which is ironically, also unmaintained.

@tarcieri
Copy link
Member

tarcieri commented Jan 5, 2022

I agree the lmdb crate qualifies as unmaintained.

I think the wording of the advisory isn't great, particularly if the suggested replacement is also unmaintained. It does at least appear to be more recently maintained.

@Jake-Shadle
Copy link
Contributor Author

Yes, it's the only replacement that I am aware of and does fix several bugs etc compared to the unmaintained one, however I was also going to open an advisory for lmdb-rkv as well after this is merged since yes, it hasn't had any activity in about 2 years, including an issue opened by mozilla themselves (well, a bot) due to travis becoming non-functional, which is why all of the PRs that have been languishing for those 2 years are all red. ☹️

Co-authored-by: Tony Arcieri <[email protected]>
@Jake-Shadle
Copy link
Contributor Author

Yup, that was much nicer. 🙂

@tarcieri tarcieri merged commit 0bc3195 into rustsec:main Jan 5, 2022
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants