From 658266f614aa29b08bf64314283e55cb953e4876 Mon Sep 17 00:00:00 2001 From: Erick Tryzelaar Date: Fri, 7 May 2021 17:19:04 -0700 Subject: [PATCH] anymap is unmaintained (#906) It appears that the anymap has been abandoned, and the most recent released version contains a soundness bug that has been fixed upstream, but never published to crates.io --- crates/anymap/RUSTSEC-0000-0000.md | 18 ++++++++++++++++++ 1 file changed, 18 insertions(+) create mode 100644 crates/anymap/RUSTSEC-0000-0000.md diff --git a/crates/anymap/RUSTSEC-0000-0000.md b/crates/anymap/RUSTSEC-0000-0000.md new file mode 100644 index 0000000..af39fe1 --- /dev/null +++ b/crates/anymap/RUSTSEC-0000-0000.md @@ -0,0 +1,18 @@ +```toml +[advisory] +id = "RUSTSEC-0000-0000" +package = "anymap" +date = "2021-05-07" +informational = "unmaintained" +url = "https://github.com/chris-morgan/anymap/issues/37" +[versions] +patched = [] +unaffected = [] +``` + +# anymap is unmaintained. + +The `anymap` crate does not appear to be maintained, and the most recent +published version 0.12.1 includes a soundness bug. This has been +[fixed](https://github.com/chris-morgan/anymap/pull/32) a few years ago, but +was never released.