From 03e8ef9c0a7bb61ea07a05f547eeeb032770bd3e Mon Sep 17 00:00:00 2001 From: Zack Slayton Date: Mon, 21 Mar 2022 09:23:28 -0400 Subject: [PATCH] Removes transitive dep on `time` As suggested by @AldaronLau in: https://github.com/zslayton/cron/pull/100 --- Cargo.toml | 5 ++++- 1 file changed, 4 insertions(+), 1 deletion(-) diff --git a/Cargo.toml b/Cargo.toml index 0247b72..7b2f51a 100644 --- a/Cargo.toml +++ b/Cargo.toml @@ -14,7 +14,10 @@ edition = "2021" name = "cron" [dependencies] -chrono = "~0.4" +# Disabling default features eliminates a superfluous transitive +# dependency on the `time` crate, which is susceptible to segfaults. +# https://rustsec.org/advisories/RUSTSEC-2020-0071 +chrono = { version = "~0.4", default-features = false, features = [] } nom = "~7" once_cell = "1.5.2"