This project might be open to known security vulnerabilities, which can be prevented by tightening the version range of affected dependencies. Find detailed information at the bottom.

Crate converge-model

Dev dependencies

(1 total, all up-to-date)

CrateRequiredLatestStatus
 trybuild^1.01.0.116up to date

Crate converge-pack

No external dependencies! 🙌

Crate converge-protocol

No external dependencies! 🙌

Crate converge-kernel

No external dependencies! 🙌

Crate converge-client

No external dependencies! 🙌

Crate converge-core

Dev dependencies

(6 total, 1 outdated)

CrateRequiredLatestStatus
 tracing-test^0.20.2.6up to date
 insta^1.421.47.2up to date
 static_assertions^1.11.1.0up to date
 serde_test^1.01.0.177up to date
 trybuild^1.01.0.116up to date
 criterion^0.50.8.2out of date

Crate converge-provider-api

No external dependencies! 🙌

Crate converge-provider

No external dependencies! 🙌

Crate converge-domain

Dev dependencies

(1 total, all up-to-date)

CrateRequiredLatestStatus
 tracing-test^0.20.2.6up to date

Crate converge-experience

No external dependencies! 🙌

Crate converge-knowledge

Dev dependencies

(2 total, 1 outdated)

CrateRequiredLatestStatus
 criterion^0.50.8.2out of date
 tokio-test^0.40.4.5up to date

Crate converge-optimization

Dev dependencies

(2 total, 1 outdated)

CrateRequiredLatestStatus
 criterion^0.50.8.2out of date
 approx^0.50.5.1up to date

Crate ortools-sys

Build dependencies

(2 total, all up-to-date)

CrateRequiredLatestStatus
 cc^11.2.60up to date
 pkg-config^0.30.3.33up to date

Crate converge-analytics

No external dependencies! 🙌

Crate converge-policy

No external dependencies! 🙌

Crate converge-runtime

Dev dependencies

(2 total, all up-to-date)

CrateRequiredLatestStatus
 tokio-test^0.40.4.5up to date
 http-body-util^0.1.30.1.3up to date

Crate converge-storage

No external dependencies! 🙌

Crate example-hello-convergence

No external dependencies! 🙌

Crate example-custom-agent

No external dependencies! 🙌

Crate example-meeting-scheduler

Dependencies

(1 total, all up-to-date)

CrateRequiredLatestStatus
 serde_json^11.0.149up to date

Crate example-custom-provider

Dependencies

(1 total, 1 possibly insecure)

CrateRequiredLatestStatus
 tokio ⚠️^11.52.1maybe insecure

Crate example-expense-approval

No external dependencies! 🙌

Crate example-vendor-selection

No external dependencies! 🙌

Crate example-loan-application

No external dependencies! 🙌

Crate example-formation-mixed

Dependencies

(3 total, 1 possibly insecure)

CrateRequiredLatestStatus
 async-trait^0.10.1.89up to date
 serde_json^11.0.149up to date
 tokio ⚠️^11.52.1maybe insecure

Crate example-live-formation

Dependencies

(3 total, 1 possibly insecure)

CrateRequiredLatestStatus
 async-trait^0.10.1.89up to date
 serde_json^11.0.149up to date
 tokio ⚠️^11.52.1maybe insecure

Crate example-intent-codec-loop

No external dependencies! 🙌

Crate example-analytics-packs

Dependencies

(3 total, 1 possibly insecure)

CrateRequiredLatestStatus
 async-trait^0.10.1.89up to date
 serde_json^11.0.149up to date
 tokio ⚠️^11.52.1maybe insecure

Crate example-adaptive-gap-loop

No external dependencies! 🙌

Crate example-fixed-point-vs-budget

No external dependencies! 🙌

Crate example-reconciliation-loop

No external dependencies! 🙌

Security Vulnerabilities

tokio: reject_remote_clients Configuration corruption

RUSTSEC-2023-0001

On Windows, configuring a named pipe server with pipe_mode will force ServerOptions::reject_remote_clients as false.

This drops any intended explicit configuration for the reject_remote_clients that may have been set as true previously.

The default setting of reject_remote_clients is normally true meaning the default is also overridden as false.

Workarounds

Ensure that pipe_mode is set first after initializing a ServerOptions. For example:

let mut opts = ServerOptions::new();
opts.pipe_mode(PipeMode::Message);
opts.reject_remote_clients(true);