Skip to content

proc-macro-error is unmaintained #4

@jayvdb

Description

@jayvdb

c.f. rustsec/advisory-db#2057

syn_derive> cargo deny check advisories
2024-09-05 23:40:22 [WARN] unable to find a config path, falling back to default config
error[unmaintained]: proc-macro-error is unmaintained
  ┌─ /home/jayvdb/rust/syn_derive/Cargo.lock:1:1
  │
1 │ proc-macro-error 1.0.4 registry+https://github.com/rust-lang/crates.io-index
  │ ━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━ unmaintained advisory detected
  │
  ├ ID: RUSTSEC-2024-0370
  ├ Advisory: https://rustsec.org/advisories/RUSTSEC-2024-0370
  ├ proc-macro-error's maintainer seems to be unreachable, with no commits for 2 years, no releases pushed for 4 years, and no activity on the GitLab repo or response to email.

    proc-macro-error also depends on `syn 1.x`, which may be bringing duplicate dependencies into dependant build trees.

    ## Possible Alternative(s)

    - [proc-macro-error2](https://crates.io/crates/proc-macro-error2)
  ├ Announcement: https://gitlab.com/CreepySkeleton/proc-macro-error/-/issues/20
  ├ Solution: No safe upgrade is available!
  ├ proc-macro-error v1.0.4
    └── syn_derive v0.1.8

advisories FAILED

https://crates.io/crates/proc-macro-error2 is the only published replacement so far as I can see. There are a few other forks around tho.

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions