Skip to content

parquet relies on unmaintained dependency paste #7598

@dentiny

Description

@dentiny

Describe the bug
I'm using cargo deny to guard against my rust project dependency, as displayed below, it relies on an unmaintained dependency paste.
rustsec link: https://rustsec.org/advisories/RUSTSEC-2024-0384

error[unmaintained]: paste - no longer maintained
    ┌─ /workspaces/moonlink/Cargo.lock:219:1
    │
219 │ paste 1.0.15 registry+https://github.com/rust-lang/crates.io-index
    │ ━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━ unmaintained advisory detected
    │
    ├ ID: RUSTSEC-2024-0436
    ├ Advisory: https://rustsec.org/advisories/RUSTSEC-2024-0436
    ├ The creator of the crate `paste` has stated in the [`README.md`](https://github.com/dtolnay/paste/blob/master/README.md) 
      that this project is not longer maintained as well as archived the repository
    ├ Announcement: https://github.com/dtolnay/paste
    ├ Solution: No safe upgrade is available!
    ├ paste v1.0.15
      └── parquet v55.1.0
          ├── iceberg v0.5.1
          │   ├── my_prj v0.0.1

Metadata

Metadata

Assignees

No one assigned

    Labels

    questionFurther information is requested

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions