Repository navigation
fix: bincode is unmaintained, replace or find a maintained fork #344
Description
Activity
Maybe:
- https://github.com/softbearstudios/bitcode which might be an improvement even?
- https://github.com/apich-organization/bincode which seems to be a maintained fork but renamed (
bincode-next) ofbincode.
Platform needs bincode 2.0.0-rc.3, commit ID aada4bb4cb457677a4b8e47572ae7ca8dd44927c , it's not in any of the two mentioned repos. We've created our own fork, https://github.com/dashpay/bincode , that contains the mentioned commit, and we'll be using that until we decide to put effort into updating to full bincode 2.0.0 release. Then we can find and verify some fork we want to use.
We consider original bincode to be potentially compromised (gh repo wiped, moved somewhere else with git history rewritten, ...).
bincodewhich is used in quite few places in the repo was flagged as unmaintained by the security audit. We might want to look into alternatives, find a maintained fork or maintain it by our selfs?For now it's just ignored in the audit. See #343.