itsscb/tracing
1
0
Fork 0
mirror of https://github.com/tokio-rs/tracing.git synced 2025-09-27 04:50:58 +00:00
Code Issues Packages Projects Releases Wiki Activity

chore: ignore unmaintained warning for net2 in cargo audit

Browse Source 
`cargo audit` currently emits a warning that the `net2` crate is
unmaintained. We only depend on `net2` as a transitive dependency of
older versions of `mio`, which we depend on via `tokio` 0.1.
`tracing-futures` has feature flags for supporting `tokio` 0.1, which we
can't remove until the next breaking change. `tokio` 0.1 won't be
updated, so as long as `tracing-futures` supports tokio 0.1, we can't
really get rid of the `net2` dependency.

Therefore, this commit adds a `.cargo/audit.toml` to just ignore the
warning. It only effects users who are using compatibility features for
*other* unmaintained libraries, anyway. Eventually, when we drop `tokio`
0.1 support entirely, we can remove the `ignore` for this warning.
This commit is contained in:
Eliza Weisman 2021-08-16 11:02:39 -07:00
parent 20e1588cfb
commit 7279cf04fe
1 changed files with 16 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

16
.cargo/audit.toml Normal file
View File

@ -0,0 +1,16 @@
[advisories]
ignore = [
# Unmaintained advisory for the `net2` crate.
#
# We ignore this, because `net2` is a transitive dependency of older
# versions of `mio`, which we depend on via `tokio` 0.1. `tokio` 0.1 won't
# be updated, so as long as `tracing-futures` supports tokio 0.1, we can't
# really get rid of the `net2` dependency.
#
# So, just ignore the warning. It only effects users who are using
# compatibility features for *other* unmaintained libraries, anyway.
#
# TODO: when `tracing-futures` drops support for `tokio` 0.1, we can remove
# the `ignore` for this warning, as we will no longer pull `net2`.
"RUSTSEC-2020-0016"
]