Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

rust-bus crates are possibly unmaintained #1756

Closed
simonsan opened this issue Aug 24, 2023 · 2 comments
Closed

rust-bus crates are possibly unmaintained #1756

simonsan opened this issue Aug 24, 2023 · 2 comments

Comments

@simonsan
Copy link

simonsan commented Aug 24, 2023

I just discovered https://github.com/rust-bus to be unmaintained and archived. They have a lot (possibly 118) of (now unmaintained?) crates on crates.io: https://crates.io/teams/github:rust-bus:maintainers

Does this need a security unmaintained crates advisory?

I couldn't extract information regarding this special case from https://github.com/rustsec/advisory-db/blob/main/HOWTO_UNMAINTAINED.md

54 crates they maintained on crates.io are updated within the last year.
The other 64 crates have been updated the last time over more than a year ago. Which makes me think, that rust-bus maintainers could be one of the main maintainers of these crates, and it might be warranted to assume they are now unmaintained?

@simonsan simonsan changed the title rust-bus is unmaintained rust-bus crates are possibly unmaintained Aug 24, 2023
@amousset
Copy link
Member

I don't think this calls for a general action for all impacted crates (which also matches the approach adopted by the crates.io team). Most of these crates should have other maintainers, and in this case our usual maintenance policy applies.

However, crates having only rust-bus as maintainer on crates.io are probably worth an "unmaintained" advisory.

@kornelski
Copy link
Contributor

Rust-bus was used a backup. The org didn't actively intervene, so the de-facto maintenance status of these crates hasn't changed.

@amousset amousset closed this as completed Sep 7, 2023
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

3 participants