This project might be open to known security vulnerabilities, which can be prevented by tightening the version range of affected dependencies. Find detailed information at the bottom.

Crate thag_rs

Dependencies

(54 total, 2 outdated, 1 possibly insecure)

CrateRequiredLatestStatus
 anyhow^1.01.0.100up to date
 arboard^3.43.6.1up to date
 atty^0.20.2.14up to date
 backtrace^0.30.3.76up to date
 bitflags^2.102.10.0up to date
 cargo-lookup^0.10.1.0up to date
 cargo_toml^0.220.22.3up to date
 chrono ⚠️^0.40.4.42maybe insecure
 clap^4.54.5.51up to date
 colored^3.03.0.0up to date
 convert_case^0.80.8.0up to date
 crossterm^0.280.29.0out of date
 dhat^0.30.3.3up to date
 dirs^6.06.0.0up to date
 document-features^0.20.2.12up to date
 documented^0.90.9.2up to date
 edit^0.10.1.5up to date
 heck^0.50.5.0up to date
 inquire^0.90.9.1up to date
 log^0.40.4.28up to date
 mockall^0.130.13.1up to date
 nu-ansi-term^0.500.50.3up to date
 pathdiff^0.20.2.3up to date
 phf^0.120.13.1out of date
 prettyplease^0.20.2.37up to date
 proc-macro2^1.01.0.103up to date
 quote^1.01.0.41up to date
 ratatui^0.290.29.0up to date
 reedline^0.430.43.0up to date
 regex^1.111.12.2up to date
 reqwest^0.120.12.24up to date
 scopeguard^1.21.2.0up to date
 semver^1.01.0.27up to date
 serde^1.01.0.228up to date
 serde_json^1.01.0.145up to date
 serde_merge^0.10.1.3up to date
 serde_yaml_ok^0.90.9.36up to date
 side-by-side-diff^0.10.1.2up to date
 simplelog^0.120.12.2up to date
 strict^0.20.2.0up to date
 strum^0.270.27.2up to date
 syn^22.0.108up to date
 tempfile^3.203.23.0up to date
 termbg^0.60.6.2up to date
 terminal-light^1.81.8.0up to date
 tinyget^1.01.1.2up to date
 tokio^1.361.48.0up to date
 toml^0.90.9.8up to date
 toml_edit^0.230.23.7up to date
 tui-textarea^0.70.7.0up to date
 url^2.52.5.7up to date
 warp^0.40.4.2up to date
 win32console^0.10.1.5up to date
 winapi^0.30.3.9up to date

Dev dependencies

(11 total, all up-to-date)

CrateRequiredLatestStatus
 assert_cmd^2.02.1.1up to date
 criterion^0.70.7.0up to date
 either^1.151.15.0up to date
 env_logger^0.110.11.8up to date
 lazy_static^1.51.5.0up to date
 once_cell^1.211.21.3up to date
 predicates^3.13.1.3up to date
 serial_test^3.23.2.0up to date
 tempfile^3.193.23.0up to date
 test-generator^0.30.3.1up to date
 tokio^1.361.48.0up to date

Build dependencies

(3 total, 1 outdated)

CrateRequiredLatestStatus
 phf^0.120.13.1out of date
 tempfile^3.203.23.0up to date
 toml^0.90.9.8up to date

Crate thag_common

Dependencies

(17 total, all up-to-date)

CrateRequiredLatestStatus
 dirs^6.06.0.0up to date
 document-features^0.20.2.12up to date
 documented^0.90.9.2up to date
 log^0.40.4.28up to date
 parking_lot^0.120.12.5up to date
 regex^1.111.12.2up to date
 serde^1.01.0.228up to date
 strum^0.270.27.2up to date
 thiserror^2.02.0.17up to date
 edit^0.10.1.5up to date
 mockall^0.130.13.1up to date
 toml_edit^0.230.23.7up to date
 toml^0.90.9.8up to date
 ratatui^0.290.29.0up to date
 scopeguard^1.21.2.0up to date
 supports-color^3.03.0.2up to date
 termbg^0.60.6.2up to date

Crate thag_proc_macros

Dependencies

(8 total, all up-to-date)

CrateRequiredLatestStatus
 crossterm^0.290.29.0up to date
 inline_colorization^0.10.1.6up to date
 prettyplease^0.20.2.37up to date
 proc-macro2^1.01.0.103up to date
 quote^1.01.0.41up to date
 strict^0.20.2.0up to date
 syn^2.02.0.108up to date
 toml^0.90.9.8up to date

Dev dependencies

(1 total, all up-to-date)

CrateRequiredLatestStatus
 strum^0.270.27.2up to date

Crate thag_profiler

Dependencies

(16 total, 1 outdated, 1 possibly insecure)

CrateRequiredLatestStatus
 backtrace^0.30.3.76up to date
 chrono ⚠️^0.40.4.42maybe insecure
 dashmap^6.16.1.0up to date
 dirs^6.06.0.0up to date
 document-features^0.20.2.12up to date
 inferno^0.120.12.3up to date
 inline_colorization^0.10.1.6up to date
 inquire^0.90.9.1up to date
 once_cell^1.201.21.3up to date
 parking_lot^0.120.12.5up to date
 ra_ap_syntax^0.0.3010.0.304out of date
 regex^1.111.12.2up to date
 serde^1.01.0.228up to date
 serde_json^1.01.0.145up to date
 smol^22.0.2up to date
 strum^0.270.27.2up to date

Dev dependencies

(5 total, all up-to-date)

CrateRequiredLatestStatus
 regex^1.111.12.2up to date
 serial_test^3.23.2.0up to date
 smol^2.02.0.2up to date
 tokio^1.361.48.0up to date
 async-std^1.121.13.2up to date

Crate thag_styling

Dependencies

(21 total, 2 outdated)

CrateRequiredLatestStatus
 document-features^0.20.2.12up to date
 log^0.40.4.28up to date
 nu-ansi-term^0.500.50.3up to date
 owo-colors^4.14.2.3up to date
 phf^0.120.13.1out of date
 regex^1.111.12.2up to date
 serde^1.01.0.228up to date
 serde_json^1.01.0.145up to date
 strum^0.270.27.2up to date
 thiserror^2.02.0.17up to date
 toml^0.90.9.8up to date
 console^0.160.16.1up to date
 crossterm^0.280.29.0out of date
 inquire^0.90.9.1up to date
 ratatui^0.290.29.0up to date
 scopeguard^1.21.2.0up to date
 termbg^0.60.6.2up to date
 image^0.250.25.8up to date
 kmeans_colors^0.70.7.1up to date
 auto-palette^0.90.9.2up to date
 palette^0.70.7.6up to date

Dev dependencies

(4 total, 1 outdated)

CrateRequiredLatestStatus
 crossterm^0.280.29.0out of date
 ratatui^0.290.29.0up to date
 serial_test^3.23.2.0up to date
 supports-color^3.03.0.2up to date

Build dependencies

(3 total, 1 outdated)

CrateRequiredLatestStatus
 phf^0.120.13.1out of date
 tempfile^3.203.23.0up to date
 toml^0.90.9.8up to date

Crate thag_demo

Dependencies

(9 total, 1 possibly insecure)

CrateRequiredLatestStatus
 clap^4.54.5.51up to date
 colored^3.03.0.0up to date
 dirs^6.06.0.0up to date
 anyhow^1.01.0.100up to date
 chrono ⚠️^0.40.4.42maybe insecure
 inferno^0.120.12.3up to date
 inquire^0.90.9.1up to date
 shell-words^1.11.1.0up to date
 regex^1.11.31.12.2up to date

Security Vulnerabilities

chrono: Potential segfault in `localtime_r` invocations

RUSTSEC-2020-0159

Impact

Unix-like operating systems may segfault due to dereferencing a dangling pointer in specific circumstances. This requires an environment variable to be set in a different thread than the affected functions. This may occur without the user's knowledge, notably in a third-party library.

Workarounds

No workarounds are known.

References