do people care that the Cargo audit CI job is fail...
# development
p
do people care that the Cargo audit CI job is failing (and has been for a while now) due to packages w/ security issues? https://github.com/pantsbuild/pants/runs/4579909153?check_suite_focus=true
h
Yes, we are supposed to care. I wasn't getting notifications and not sure if anyone else was either
f
I do, but I need to figure out what to do with warnings like this one:
Copy code
Crate:         anymap
Version:       0.12.1
Warning:       unmaintained
like do I need to replace the deps that use anymap?
so I’ll fix once I’ve figured out what to do with such messages
by triaging what deps are actually using those underlying crates
it’s not just a simple upgrade and done
h
Hm yeah..maybe we should ignore them?
f
I’m triaging tonight. will figure out what to do with each.
e
I bumped into the same long red and did some of this work here: https://github.com/pantsbuild/pants/pull/13728 I punted on all these ~unfixable ones too though.