rust-unic seems unmaintained

[evilpie]

https://github.com/open-i18n/rust-unic contains multiple crates. The last commit has been 5 years ago. Outdated Unicode information causes compatibility issues. (See for example denoland/rust-urlpattern#54)

[djc]

@behnam should we mark these crates as unmaintained?

[evilpie]

I will prepare a PR.

[djc]

I've been able to confirm that these are unmaintained. Are you able to get the ball rolling on a PR?

[evilpie]

Actually, unic has a lot different crates, is there some way of having one advisory for multiple crates?

[djc]

Nope. But feel free to script something that generates all the mds with almost-identical content.

[djc]

(Some discussion in #2254.)

[hsivonen]

Crates whose name are (or start with) unic-langid or unic-locale come from a different repo that is still maintained (even though the principal author is now working on icu_locale), so it probably makes sense not to include those when marking the other crates starting with unic- as unmaintained. CC @zbraniecki

[evilpie]

We are only talking about crates that come from https://github.com/open-i18n/rust-unic.

[psandana]

@evilpie , is there any suggested project to use instead?

[djc]

@psandana see the PR linked above. If the advisory does not contain an alternative, we don't know of one.

[psandana]

@djc I've seen other RUSTSEC issues that offered the alternatives in the description. That's handy to prevent doing archaeology to find one to move.

[djc]

If you'd looked at the PR you'd see that where available, the alternatives are mentioned in the advisory.

As I already said in my previous comment.