Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Yanked version ignored too much #154

Open
cecton opened this issue May 16, 2022 · 0 comments
Open

Yanked version ignored too much #154

cecton opened this issue May 16, 2022 · 0 comments

Comments

@cecton
Copy link
Member

cecton commented May 16, 2022

Related to: rust-disk-partition-management/gptman#82 (comment)

We noticed that yanked dependencies do not seem to be reported at all. They're not necessarily vulnerabilities but they should be reported at least as outdated.

This can be observed in commit rust-disk-partition-management/gptman@d7ca717

It is important to note that:

  1. crossbeam-utils is not a direct dependency of the project
  2. it's only pulled for the binary of this crate and not the library

Possibly related to #109
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees
No one assigned
Labels
None yet
Projects
None yet
Milestone
No milestone
Development

No branches or pull requests
1 participant
@cecton