Rust DoctorCargo health · Dependencies
Lockfile crate flagged unmaintained by RustSec
rust_doctor::cargo::unmaintained_dependency
Replace the crate with a maintained alternative the advisory names, or vendor and own it; the finding is read from the local RustSec database cargo audit or cargo deny keeps, never fetched.
- Category
- Dependencies
- Default level
- warn
- Tier
- P2
- Producer
- Cargo health
- Diff scope
- line
Not a defect when
The crate is small, finished and free of any vulnerability advisory, no maintained replacement exists, and the team accepts owning fixes if one is ever needed.
What it reads
Cargo.toml, Cargo.lock and .cargo/config.toml.
Tier
Ordinary defect.
The tier bounds how severe a rule may be; its category bounds the tier.Diff scope
The changed line itself.
What--scope contextual looks at to decide whether a change caused the finding.Change it
Turn it off, or make it blocking, without touching the code it flags:
rust-doctor --rule rust_doctor::cargo::unmaintained_dependency=off .
rust-doctor --rule rust_doctor::cargo::unmaintained_dependency=error .