Uploaded image for project: 'Rust Driver'
  1. Rust Driver
  2. RUST-2100

Switch off of unmaintained crate "derivative"

XMLWordPrintableJSON

    • Type: Icon: Improvement Improvement
    • Resolution: Duplicate
    • Priority: Icon: Unknown Unknown
    • None
    • Affects Version/s: None
    • Component/s: None
    • None
    • Rust Drivers
    • Hide

      1. What would you like to communicate to the user about this feature?
      2. Would you like the user to see examples of the syntax and/or executable code and its output?
      3. Which versions of the driver/connector does this apply to?

      Show
      1. What would you like to communicate to the user about this feature? 2. Would you like the user to see examples of the syntax and/or executable code and its output? 3. Which versions of the driver/connector does this apply to?

      The rust driver seems to have a dependency on this crate https://crates.io/crates/derivative

       

      However it appears in the rustsec advisory DB as unmaintained:

      https://github.com/mcarton/rust-derivative/issues/117

      We should switch to something else, like "educe".

       

      For context, in disaggregated storage (which now uses the rust driver) this is causing a failure in a lint task which checks dependencies for issues with security, licensing, etc. via "cargo deny" https://github.com/EmbarkStudios/cargo-deny

            Assignee:
            Unassigned Unassigned
            Reporter:
            mikeo@mongodb.com Michael O'Brien
            Votes:
            0 Vote for this issue
            Watchers:
            2 Start watching this issue

              Created:
              Updated:
              Resolved: