Skip to content

Conversation

@vii
Copy link

@vii vii commented Nov 17, 2025

The paste crate is no longer maintained according to https://osv.dev/vulnerability/RUSTSEC-2024-0436

pastey claims to be a drop in replacement; following instructions added

+ paste = { package = "pastey", version = "*" }

The paste crate is no longer maintained according to https://osv.dev/vulnerability/RUSTSEC-2024-0436 

`pastey` claims to be a drop in replacement; following [instructions](https://docs.rs/pastey/latest/pastey/) added 

```
+ paste = { package = "pastey", version = "*" }
```
@github-actions github-actions bot added the logical-expr Logical plan and expressions label Nov 17, 2025
@alamb
Copy link
Contributor

alamb commented Nov 17, 2025

Thank you @vii . Is there some problem with paste that would need maintenance? Unless there is a problem I am pretty hesitant to take on a new crate with a relatively small distribution

@vii
Copy link
Author

vii commented Nov 17, 2025

@alamb yes that's a great question (see reddit thread). The reason I want to move off paste is to avoid RUSTSEC-2024-0436 which blocks us using it at work.

Would you accept a PR with the token pasting implemented inline in this crate instead?

@alamb
Copy link
Contributor

alamb commented Nov 18, 2025

@alamb yes that's a great question (see reddit thread). The reason I want to move off paste is to avoid RUSTSEC-2024-0436 which blocks us using it at work.

Would you accept a PR with the token pasting implemented inline in this crate instead?

Yes, absolutely, inlining the implementation (or frankly removing the use of paste from this crate) would both be good solutions in my mind

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

logical-expr Logical plan and expressions

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants