This project contains known security vulnerabilities. Find detailed information at the bottom.
volta(12 total, 4 outdated)
| Crate | Required | Latest | Status |
|---|---|---|---|
| serde | ^1.0 | 1.0.229 | up to date |
| serde_json | ^1.0.135 | 1.0.154 | up to date |
| once_cell | ^1.19.0 | 1.21.4 | up to date |
| log | ^0.4 | 0.4.35 | up to date |
| node-semver | ^2 | 2.2.0 | up to date |
| clap | ^4.5.24 | 4.6.7 | up to date |
| clap_complete | ^4.5.46 | 4.6.11 | up to date |
| mockito | ^0.31.1 | 1.7.2 | out of date |
| textwrap | ^0.16.1 | 0.16.4 | up to date |
| which | ^7.0.1 | 8.0.6 | out of date |
| dirs | ^6.0.0 | 7.0.0 | out of date |
| winreg | ^0.53.0 | 0.56.0 | out of date |
(5 total, 1 outdated)
| Crate | Required | Latest | Status |
|---|---|---|---|
| hamcrest2 | ^0.3.0 | 1.0.1 | out of date |
| envoy | ^0.1.3 | 0.1.3 | up to date |
| ci_info | ^0.14.14 | 0.14.15 | up to date |
| headers | ^0.4 | 0.4.2 | up to date |
| cfg-if | ^1.0 | 1.0.5 | up to date |
volta-core(34 total, 7 outdated)
| Crate | Required | Latest | Status |
|---|---|---|---|
| terminal_size | ^0.4.1 | 0.4.4 | up to date |
| indicatif | ^0.17.9 | 0.18.6 | out of date |
| console | >=0.11.3, <1.0.0 | 0.16.6 | up to date |
| readext | ^0.1.0 | 0.1.0 | up to date |
| serde_json | ^1.0.135 | 1.0.154 | up to date |
| serde | ^1.0.217 | 1.0.229 | up to date |
| node-semver | ^2 | 2.2.0 | up to date |
| cmdline_words_parser | ^0.2.1 | 0.2.1 | up to date |
| cfg-if | ^1.0 | 1.0.5 | up to date |
| tempfile | ^3.14.0 | 3.27.0 | up to date |
| os_info | ^3.9.2 | 3.15.0 | up to date |
| detect-indent | ^0.1 | 0.1.0 | up to date |
| envoy | ^0.1.3 | 0.1.3 | up to date |
| mockito | ^0.31.1 | 1.7.2 | out of date |
| regex | ^1.11.1 | 1.13.1 | up to date |
| dirs | ^6.0.0 | 7.0.0 | out of date |
| chrono | ^0.4.39 | 0.4.45 | up to date |
| textwrap | ^0.16.1 | 0.16.4 | up to date |
| log | ^0.4 | 0.4.35 | up to date |
| ctrlc | ^3.4.5 | 3.5.2 | up to date |
| walkdir | ^2.5.0 | 2.5.0 | up to date |
| once_cell | ^1.19.0 | 1.21.4 | up to date |
| dunce | ^1.0.5 | 1.0.5 | up to date |
| ci_info | ^0.14.14 | 0.14.15 | up to date |
| httpdate | ^1 | 1.0.3 | up to date |
| headers | ^0.4 | 0.4.2 | up to date |
| attohttpc | ^0.28 | 0.31.0 | out of date |
| chain-map | ^0.1.0 | 0.1.0 | up to date |
| indexmap | ^2.7.0 | 2.14.2 | up to date |
| retry | ^2 | 2.2.0 | up to date |
| fs2 | ^0.4.3 | 0.4.3 | up to date |
| which | ^7.0.1 | 8.0.6 | out of date |
| winreg | ^0.55.0 | 0.56.0 | out of date |
| junction | ^1.2.0 | 2.1.0 | out of date |
volta-migrate(6 total, all up-to-date)
| Crate | Required | Latest | Status |
|---|---|---|---|
| log | ^0.4 | 0.4.35 | up to date |
| tempfile | ^3.14.0 | 3.27.0 | up to date |
| node-semver | ^2 | 2.2.0 | up to date |
| serde_json | ^1.0.135 | 1.0.154 | up to date |
| serde | ^1.0.217 | 1.0.229 | up to date |
| walkdir | ^2.5.0 | 2.5.0 | up to date |
test-support(3 total, 1 outdated)
| Crate | Required | Latest | Status |
|---|---|---|---|
| hamcrest2 | ^0.3.0 | 1.0.1 | out of date |
| serde_json | ^1.0.135 | 1.0.154 | up to date |
| thiserror | ^2.0.9 | 2.0.21 | up to date |
archive(10 total, 2 outdated, 1 insecure)
| Crate | Required | Latest | Status |
|---|---|---|---|
| flate2 | ^1.0 | 1.1.10 | up to date |
| tar | ^0.4.13 | 0.4.46 | up to date |
| zip ⚠️ | =2.1.6 | 9.3.0 | insecure |
| tee | ^0.1.0 | 0.1.0 | up to date |
| verbatim | ^0.1 | 0.1.1 | up to date |
| cfg-if | ^1.0 | 1.0.5 | up to date |
| headers | ^0.4 | 0.4.2 | up to date |
| thiserror | ^2.0.0 | 2.0.21 | up to date |
| attohttpc | ^0.28 | 0.31.0 | out of date |
| log | ^0.4 | 0.4.35 | up to date |
fs-utilsNo external dependencies! 🙌
validate-npm-package-name(3 total, all up-to-date)
| Crate | Required | Latest | Status |
|---|---|---|---|
| once_cell | ^1.19.0 | 1.21.4 | up to date |
| percent-encoding | ^2.1.0 | 2.3.2 | up to date |
| regex | ^1.1.6 | 1.13.1 | up to date |
volta-layoutNo external dependencies! 🙌
progress-readNo external dependencies! 🙌
volta-layout-macro(3 total, 1 outdated)
| Crate | Required | Latest | Status |
|---|---|---|---|
| syn | ^1.0.5 | 3.0.9 | out of date |
| quote | ^1.0.2 | 1.0.47 | up to date |
| proc-macro2 | ^1.0.2 | 1.0.107 | up to date |
zip: Incorrect path canonicalization during Archive Extraction Leading to Arbitrary File WriteIn the archive extraction routine of affected versions of the zip crate, symbolic links earlier in the archive are allowed to be used for later files in the archive without validation of the final canonicalized path, allowing maliciously crafted archives to overwrite arbitrary files in the file system when extracted.
For more details, see the GitHub-hosted security advisory: https://github.com/zip-rs/zip2/security/advisories/GHSA-94vh-gphv-8pm8