Tarmageddon is a great example of why RUSTSEC tracks unmaintained crates/libraries and why such unmaintained projects are very much security-relevant: https://edera.dev/stories/tarmageddon
Discussion
Loading...
Post
I'll go as far as to say one of the most infuriating things about RUSTSEC is people who show up and claim "unmaintained crates aren't security-relevant! I'll die on this hill" and it's like no, no my sweet summer child, you are simply terribly, terribly confused
Every single widely-used, unmaintained crate is a security incident waiting to happen
bonfire.cafe
A space for Bonfire maintainers and contributors to communicate
Automatic federation enabled