DaGenix/rust-crypto

Yank breaking versions with "*" deps

kornelski opened this issue · 0 comments

Some old versions of rust-crypto have dependencies specified with "*" version requirement (rand = "*", rustc-serialize = "*", libc = "*", gcc = "*", etc.).

Crates with such vague dependency versions became unusable, because * allows picking too-new semver-incompatible dependencies.
It also breaks Cargo's minimal-versions feature, because * requirement allows picking very very old dependencies
that aren't compatible with Rust 1.0.

Because these old versions of rust-crypto are unusable and cause problems for Cargo, I suggest yanking them:

cargo yank --vers 0.1.0
cargo yank --vers 0.1.1