-
Notifications
You must be signed in to change notification settings - Fork 228
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Fix the vulnerabilities alerts and run make security-audit
in CI
#39
Comments
I have a quick trying but failed. yaml-rust is suggested to upgrade to 0.4.1. I tried using clap v3.0.0-beta.1 for ckb but failed. I was using following config:
here is the output for building:
There is a hint for how to upgrade to yaml-rust v4: |
Maybe we can just get rid of YAML. I prefer declaring the options just in Rust. Hey, @zhangsoledad, what's your opinion? |
I have seen many libraries that can be upgraded. Consider upgrade them all at once? |
#35 is going to add the outdated dependencies badge, here is the scan result: |
Will create separate issue for each crate |
See #38
Severe
The text was updated successfully, but these errors were encountered: