Report sevenz-rust and lzma-rust as unmaintained
#2086
Conversation
FelixEngl
changed the title
sevenz-rust and lzma-rust as unmaintained
|
@FelixEngl Did you confirm that dyz1990's GitHub account was really deleted? If their account has been flagged, other users cannot access to the account and the associated repositories. So I think you should ask him about them first. According to the forked lzma-rust's log, their email address may be [email protected]. |
|
Hi @sorairolake, no I didn't even know that this was a thing. I'll try to contact them this week when I find the time for it. |
|
I can't find information on how a suspended account looks to other users (github definitely displays an account-suspended message to the account owner). There's no redirect to a new name. Commits are still associated with the username, but GitHub doesn't turn the username into a link. I think regardless of whether it's deleted or suspended (without resolution for months, which may be permanent), the sole crate owner has no ability to make releases. |
There was a problem hiding this comment.
Since there has been no response from the author for several months, I think these crates can be considered unmaintained. sevenz-rust may be the only practical implementation of the 7z format written in Rust, and many crates depend on it. So I think it would be better if a maintained fork of these crates is available.
|
Hi! I also tried to contact the original author to take over the maintenance of the original crates but couldn't reach them. Since we needed a maintained version of those crates for our project , I decided to use the last git version I could find of the original repo (0.6.0), backport the changes from 0.6.1 and then continued the development / maintenance of the crate. They can be found under the crate names "sevenz-rust2" and "lzma-rust2". |
|
The situation with this crate has not changed |
|
Per #2032, I think we're not quite at the point where we're ready to merge this, feel free to ping again in 3-6 months. |
Hello everyone,
The owner (dyz1990) of the two crates
sevenz-rustandlzma-rusthas deleted their GitHub account and the associated GitHub repositories.There is no way to contact the author or open a GitHub issue according to the unmaintained policy, so the
urlfield is not included in the advisory.Regarding the "implicitly unmaintained" rationale:
The last release was 2 months ago, but as described in the previous paragraph: The author has deleted their GitHub account and therefore abandoned the crates, and neither "stale repository" nor "90 days unresponsive" can be applied.
Best regards
Felix