Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Remove getset dependency #358

Closed
wants to merge 1 commit into from
Closed

Conversation

oscargus
Copy link
Contributor

getset is pretty old and pulls in a bit of dependencies, including syn v1 (there is a PR to update to syn v2, but it has not been acted on for a few months). Since it is sparsely used, I simply used cargo expand and copied the relevant code.

This should not affect anything other than some reduced dependencies.

@LukeMathWalker
Copy link

Any chance this could be acted on? It'd remove an annoying advisory from the dependency tree of vergen.

@CraZySacX
Copy link
Member

@LukeMathWalker Yeah it has some lint issues that need to be fixed. If the submitter doesn't rectify those shortly I'll close this and get it done myself. On a side note, I'm not a fan of using RUSTSEC to report unmaintained crates, unless they themselves have security issues. I haven't dug into proc-macro-error, but reporting issues like this through RUSTSEC only serves to dilute real issues.

@CraZySacX
Copy link
Member

Superseded by #379

@CraZySacX CraZySacX closed this Sep 17, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

3 participants