The Rust ecosystem, or at least the subset of projects that have stringent standards for their dependencies as enforced by tools like cargo-deny, recently lost a small but useful little library: paste (crates.io/crates/paste). The reason is that David Tolnay announced that paste is no longer maintained, and as a consequence, RustSec issued this advisory about a week ago: rustsec.org/advisories/RUSTSEC…
So as a result, some code in AccessKit has to be more repetitive. I'm sure we're not the only ones.
RUSTSEC-2024-0436: paste: paste - no longer maintained › RustSec Advisory Database
Security advisory database for Rust crates published through https://crates.iorustsec.org

to je naprosto TOP.


)
Matt Campbell
in reply to Matt Campbell • • •To be clear, I'm not complaining about David Tolnay's decision. Every open-source release is a gift that comes with no promises of further work. Deciding that he was done with that project is his prerogative.
I *am* annoyed by the RustSec advisory and the fact that it can break existing downstream projects. Not every library needs constant maintenance; it's possible for a library, particularly a simple one like paste, to just be *done*.
Matt Campbell
in reply to Matt Campbell • • •x0
in reply to Matt Campbell • • •cesarb
in reply to x0 • • •Matt Campbell
in reply to cesarb • • •cesarb
in reply to cesarb • • •Matt Campbell
in reply to cesarb • • •Matt Campbell
in reply to Matt Campbell • • •milas
in reply to Matt Campbell • • •Matt Campbell
in reply to milas • • •