Merge pull request #279 from CAD97/patch-1

RUSTSEC-2020-0011: make wording more objective
This commit is contained in:
Tony Arcieri
2020-04-25 12:13:38 -07:00
committed by GitHub

View File

@@ -3,14 +3,12 @@ id = "RUSTSEC-2020-0011"
package = "plutonium"
date = "2020-04-23"
informational = "notice"
title = "Crate intended to hide unsafe use."
url = "https://www.reddit.com/r/rust/comments/g5rsuh/show_me_the_most_illegal_rust_code_youve_ever/fo88z2d?utm_source=share&utm_medium=web2x"
title = "Library exclusively intended to obfuscate code."
url = "https://docs.rs/plutonium/0.2.2/plutonium/"
description = """
This crate allows calling unsafe functions without using the keyword "unsafe". It further
deliberately makes this undetectable with cargo-geiger.
This crate allows you to write safe functions with unsafe bodies without the `unsafe` keyword.
In the API docs the author also states their intend to disable `#![forbid(unsafe)]`. No
production code should ever have it in their dependency graph.
The value this adds is questionable, and hides `unsafe` usages from naive analysis.
"""
[versions]
patched = []