Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Update rustsec_advisories test #478

Merged
merged 1 commit into from
Dec 23, 2024
Merged

Update rustsec_advisories test #478

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
1 commit
Select commit
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
8 changes: 4 additions & 4 deletions README.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -19,7 +19,7 @@

b. Either X has no associated repository, or its repository's last commit was over a year ago (a configurable value).

As of 2024-12-09, the RustSec Advisory Database contains 130 active advisories for unmaintained packages. Using the above conditions, `cargo-unmaintained` automatically identifies 99 (76%) of them. These results can be reproduced by running the [`rustsec_advisories`] example within this repository.
As of 2024-12-23, the RustSec Advisory Database contains 132 active advisories for unmaintained packages. Using the above conditions, `cargo-unmaintained` automatically identifies 97 (73%) of them. These results can be reproduced by running the [`rustsec_advisories`] example within this repository.

### Notes

Expand All @@ -29,11 +29,11 @@ As of 2024-12-09, the RustSec Advisory Database contains 130 active advisories f

- The purpose of the "over a year ago" qualifications in condition 3 is to give package maintainers a chance to update their packages. That is, an incompatible upgrade to one of X's dependencies could require time-consuming changes to X. Without this check, `cargo-unmaintained` would produce many false positives.

- Of the 31 packages in the RustSec Advisory Database _not_ identified by `cargo-unmaintained`:
- 8 do not build
- Of the 35 packages in the RustSec Advisory Database _not_ identified by `cargo-unmaintained`:
- 11 do not build
- 3 are existent, unarchived leaves
- 2 were updated within the past 365 days
- 18 were not identified for other reasons
- 19 were not identified for other reasons

## Output

Expand Down
4 changes: 2 additions & 2 deletions examples/rustsec_advisories.rs
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -160,8 +160,8 @@ fn display_expected_readme_contents(outcomes: &[Outcome<Reason>]) {
println!(
"As of {today}, the RustSec Advisory Database contains {count} active advisories for \
unmaintained packages. Using the above conditions, `cargo-unmaintained` automatically \
identifies {found} ({percentage}) of them. These results can be reproduced by running \
the [`rustsec_advisories`] binary within this repository.",
identifies {found} ({percentage}%) of them. These results can be reproduced by running \
the [`rustsec_advisories`] example within this repository.",
);
println!(
"- Of the {not_found} packages in the RustSec Advisory Database _not_ identified by \
Expand Down
59 changes: 45 additions & 14 deletions tests/rustsec_advisories.stdout
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -1,4 +1,4 @@
130 advisories for unmaintained packages
132 advisories for unmaintained packages
lz4-compress...found
serial...not found
tempdir...found
Expand Down Expand Up @@ -29,9 +29,36 @@ fake_clock...found
safe_bindgen...found
quic-p2p...found
routing...found
safe_app...found
safe_authenticator...found
safe_vault...found
safe_app...error:
```
Updating crates.io index
error: failed to select a version for the requirement `clap = "~2.14.0"`
candidate versions found which didn't match: 4.5.23, 4.5.22, 4.5.21, ...
location searched: crates.io index
required by package `resource_proof v0.4.0`
... which satisfies dependency `resource_proof = "~0.4.0"` of package `routing v0.31.0`
... which satisfies dependency `routing = "~0.31.0"` of package `safe_app v0.1.0`
... which satisfies dependency `safe_app = "*"` of package `safe_app-temp-package v0.1.0 ([..])`
if you are looking for the prerelease package it needs to be specified explicitly
clap = { version = "4.0.0-rc.3" }
```
safe_authenticator...error:
```
Updating crates.io index
error: failed to select a version for the requirement `clap = "~2.14.0"`
candidate versions found which didn't match: 4.5.23, 4.5.22, 4.5.21, ...
location searched: crates.io index
required by package `resource_proof v0.4.0`
... which satisfies dependency `resource_proof = "~0.4.0"` of package `routing v0.31.0`
... which satisfies dependency `routing = "~0.31.0"` of package `safe_authenticator v0.1.0`
... which satisfies dependency `safe_authenticator = "*"` of package `safe_authenticator-temp-package v0.1.0 ([..])`
if you are looking for the prerelease package it needs to be specified explicitly
clap = { version = "4.0.0-rc.3" }
```
safe_vault...error:
```
Error: found no packages matching `safe_vault`
```
safe_core...found
stderr...found
rulinalg...found
Expand Down Expand Up @@ -169,10 +196,15 @@ gtk3-macros...found
gtk-sys...found
gtk-layer-shell...found
gtk-layer-shell-sys...found
not found - error (8)
get-size...not found
get-size-derive...found
not found - error (11)
block-cipher-trait https://rustsec.org/advisories/RUSTSEC-2020-0018.html
block-cipher https://rustsec.org/advisories/RUSTSEC-2020-0057.html
stream-cipher https://rustsec.org/advisories/RUSTSEC-2020-0058.html
safe_app https://rustsec.org/advisories/RUSTSEC-2020-0083.html
safe_authenticator https://rustsec.org/advisories/RUSTSEC-2020-0084.html
safe_vault https://rustsec.org/advisories/RUSTSEC-2020-0085.html
safe-api https://rustsec.org/advisories/RUSTSEC-2021-0024.html
miscreant https://rustsec.org/advisories/RUSTSEC-2021-0062.html
cargo-download https://rustsec.org/advisories/RUSTSEC-2021-0133.html
Expand All @@ -185,7 +217,7 @@ not found - leaf (3)
not found - recently-updated (2)
atty https://rustsec.org/advisories/RUSTSEC-2024-0375.html
minitrace https://rustsec.org/advisories/RUSTSEC-2024-0390.html
not found - other (18)
not found - other (19)
serial https://rustsec.org/advisories/RUSTSEC-2017-0008.html
typemap https://rustsec.org/advisories/RUSTSEC-2019-0039.html
stb_truetype https://rustsec.org/advisories/RUSTSEC-2020-0020.html
Expand All @@ -204,7 +236,8 @@ not found - other (18)
yaml-rust https://rustsec.org/advisories/RUSTSEC-2024-0320.html
instant https://rustsec.org/advisories/RUSTSEC-2024-0384.html
chrono-english https://rustsec.org/advisories/RUSTSEC-2024-0395.html
found (99)
get-size https://rustsec.org/advisories/RUSTSEC-2024-0425.html
found (97)
lz4-compress https://rustsec.org/advisories/RUSTSEC-2017-0007.html
tempdir https://rustsec.org/advisories/RUSTSEC-2018-0017.html
boxfnonce https://rustsec.org/advisories/RUSTSEC-2019-0040.html
Expand All @@ -217,9 +250,6 @@ found (99)
safe_bindgen https://rustsec.org/advisories/RUSTSEC-2020-0066.html
quic-p2p https://rustsec.org/advisories/RUSTSEC-2020-0067.html
routing https://rustsec.org/advisories/RUSTSEC-2020-0076.html
safe_app https://rustsec.org/advisories/RUSTSEC-2020-0083.html
safe_authenticator https://rustsec.org/advisories/RUSTSEC-2020-0084.html
safe_vault https://rustsec.org/advisories/RUSTSEC-2020-0085.html
safe_core https://rustsec.org/advisories/RUSTSEC-2020-0086.html
stderr https://rustsec.org/advisories/RUSTSEC-2020-0109.html
rulinalg https://rustsec.org/advisories/RUSTSEC-2020-0147.html
Expand Down Expand Up @@ -304,10 +334,11 @@ found (99)
gtk-sys https://rustsec.org/advisories/RUSTSEC-2024-0420.html
gtk-layer-shell https://rustsec.org/advisories/RUSTSEC-2024-0422.html
gtk-layer-shell-sys https://rustsec.org/advisories/RUSTSEC-2024-0423.html
get-size-derive https://rustsec.org/advisories/RUSTSEC-2024-0427.html
---
As of 2024-12-09, the RustSec Advisory Database contains 130 active advisories for unmaintained packages. Using the above conditions, `cargo-unmaintained` automatically identifies 99 (76%) of them. These results can be reproduced by running the [`rustsec_advisories`] example within this repository.
- Of the 31 packages in the RustSec Advisory Database _not_ identified by `cargo-unmaintained`:
- 8 do not build
As of 2024-12-23, the RustSec Advisory Database contains 132 active advisories for unmaintained packages. Using the above conditions, `cargo-unmaintained` automatically identifies 97 (73%) of them. These results can be reproduced by running the [`rustsec_advisories`] example within this repository.
- Of the 35 packages in the RustSec Advisory Database _not_ identified by `cargo-unmaintained`:
- 11 do not build
- 3 are existent, unarchived leaves
- 2 were updated within the past 365 days
- 18 were not identified for other reasons
- 19 were not identified for other reasons
Loading