Drakulix/simplelog.rs

Security advisories

brightly-salty opened this issue · 1 comments

After running cargo audit on my project, I got the following warning (Link to advisory) concerning this package's dependencies. Perhaps they should be implemented by replacing term with crossterm, termcolor, or yansi? I realize it would not be an easy fix since this dependency is likely important to simplelog's functioning.

Crate:         term
Version:       0.5.2
Warning:       unmaintained
Title:         term is looking for a new maintainer
Date:          2018-11-19
ID:            RUSTSEC-2018-0015
URL:           https://rustsec.org/advisories/RUSTSEC-2018-0015
Dependency tree:
term 0.5.2
└── simplelog 0.5.3

Sorry, false alarm. Was using an older version of the crate. Newer version does not have this warning.