Stream: git-wasmtime

Topic: wasmtime / issue #3576 RUSTSEC-2021-0127: serde_cbor is u...

Wasmtime GitHub notifications bot (Dec 01 2021 at 00:05):

github-actions[bot] opened issue #3576:

serde_cbor is unmaintained

Details
Status	unmaintained
Package	serde_cbor
Version	0.11.2
URL	https://github.com/pyfisch/cbor
Date	2021-08-15

The serde_cbor crate is unmaintained. The author has archived the github repository.

Alternatives proposed by the author:

*ciborium
*minicbor

See advisory page for additional details.

Wasmtime GitHub notifications bot (Dec 01 2021 at 00:23):

pchickey commented on issue #3576:

This is a transitive dependency via criterion. Updating from the current criterion 0.3.4 to 0.3.5 does not drop this dep. Given that its only matters for benchmarking, I don't think we need to take any urgency in resolving this, and let criterion get around to updating when it can.

Wasmtime GitHub notifications bot (Jan 26 2023 at 20:06):

bjorn3 commented on issue #3576:

Criterion 0.4.0 which was released September last year drops the serde_cbor dependency.

Wasmtime GitHub notifications bot (May 11 2024 at 23:12):

alexcrichton closed issue #3576:

serde_cbor is unmaintained

Details
Status	unmaintained
Package	serde_cbor
Version	0.11.2
URL	https://github.com/pyfisch/cbor
Date	2021-08-15

The serde_cbor crate is unmaintained. The author has archived the github repository.

Alternatives proposed by the author:

*ciborium
*minicbor

See advisory page for additional details.

Wasmtime GitHub notifications bot (May 11 2024 at 23:12):

alexcrichton commented on issue #3576:

This is no longer in Wasmtime's dependency graph so I'm going to close this.

Last updated: Dec 23 2024 at 12:05 UTC