From b761cd74283fde267b8062f0f939a70a4ee4682d Mon Sep 17 00:00:00 2001 From: Naja Melan Date: Thu, 23 Apr 2020 23:26:08 +0200 Subject: [PATCH] Advisory for plutonium. --- crates/plutonium/RUSTSEC-0000-0000.toml | 15 +++++++++++++++ 1 file changed, 15 insertions(+) create mode 100644 crates/plutonium/RUSTSEC-0000-0000.toml diff --git a/crates/plutonium/RUSTSEC-0000-0000.toml b/crates/plutonium/RUSTSEC-0000-0000.toml new file mode 100644 index 0000000..30335e4 --- /dev/null +++ b/crates/plutonium/RUSTSEC-0000-0000.toml @@ -0,0 +1,15 @@ +[advisory] +id = "RUSTSEC-0000-0000" +package = "plutonium" +date = "2020-04-23" +title = "Crate intended to hide unsafe use." +url = "https://www.reddit.com/r/rust/comments/g5rsuh/show_me_the_most_illegal_rust_code_youve_ever/fo88z2d?utm_source=share&utm_medium=web2x" +description = """ +This crate allows calling unsafe functions without using the keyword "unsafe". It further +deliberately makes this undetectable with cargo-geiger. + +In the API docs the author also states their intend to disable `#![forbid(unsafe)]`. No +production code should ever have it in their dependency graph. +""" +[versions] +patched = ["none"]