RUSTSEC-2023-0028: buf_redux is Unmaintained

[github-actions]

buf_redux is Unmaintained

Details
Status	unmaintained
Package	buf_redux
Version	0.8.4
URL	https://github.com/abonander/buf_redux/issues
Date	2023-01-24

Last release was over three years ago.

The maintainer(s) have been unreachable to respond to any issues that may or may not include security issues.

The repository is now archived and there is no security policy in place to contact the maintainer(s) otherwise.

The safety-undocumented unsafe in the crate may or may not be safe to use.

The crate also has a current future incompatibility warning buf_redux/23.

Possible Alternatives

The below may or may not provide alternative(s)

• Rust alloc / std vec::Vec, collections::VecDeque
• buffer-redux - fork
• bytes
• crates.io search for 'buffer'

See advisory page for additional details.

[taiki-e]

Closing as this is dev-dep via warp.

$ cargo tree -i -p buf_redux
buf_redux v0.8.4
└── multipart v0.18.0
    └── warp v0.3.3
        [dev-dependencies]
        └── async-compat v0.2.1 (/Users/taiki/projects/sources/smol-rs/async-compat)