Lib.rs

Issues found

Based on crates you own that have been published to crates.io. The best way to monitor these issues is to subscribe to the atom feed in your RSS reader.

• anni-provider

  • Dependency dashmap 5.2.0 is outdated

    Consider upgrading to 6.1.0 to get all the fixes and improvements.

    Easy way to bump dependencies: cargo install cargo-edit; cargo upgrade -i; Also check out Dependabot service on GitHub.

    dashmap versions

  • Dependency lru 0.12.0 is a bit outdated

    Consider upgrading to 0.14.0 to get all the fixes and improvements.

    In Cargo, different 0.x versions are considered incompatible, so this is a semver-major upgrade.

    lru versions

  • Dependency reqwest 0.11.15 is outdated

    Upgrade to 0.12.15 to get all the fixes, and avoid causing duplicate dependencies in projects.

    reqwest versions

  • Missing keywords

    Help users find your crates. Add keywords = ["anni", "provider", "anni-provider"] (up to 5) to the Cargo.toml. Best keywords are alternative terms or their spellings that aren't in the name or description. Also add a keyword that precisely categorizes this crate and groups it with other similar crates.

  • Optional dependency 'reqwest' exposed as an implicit feature

    Cargo automatically makes publicly-available crate features for every optional dependency, unless the dependencies are referenced using dep: syntax. Features 'reqwest', 'anni-google-drive3', 'anni-repo' may have been unintentional.

    Crate features

• anni-provider, anni-repo, anni-common, iori-ssa, anni-vgmdb, anni-workspace, annil, anni-fetch

  • Dependency thiserror 1.0 is a bit outdated

    Consider upgrading to 2.0.12 to get all the fixes and improvements.

    thiserror versions

• anni-google-drive3

  • Dependency hyper-rustls ^0.23 is significantly outdated

    Upgrade to 0.27.5 to get all the fixes, and avoid causing duplicate dependencies in projects.

    hyper-rustls versions

  • Dependency mime ^ 0.2.0 is significantly outdated

    Upgrade to 0.3.17 to get all the fixes, and avoid causing duplicate dependencies in projects.

    mime versions

  • Dependency url = 1.7 is significantly outdated

    Upgrade to 2.5.0 to get all the fixes, and avoid causing duplicate dependencies in projects.

    url versions

  • Dependency yup-oauth2 ^ 7.0 is significantly outdated

    Upgrade to 12.1.0 to get all the fixes, and avoid causing duplicate dependencies in projects.

    yup-oauth2 versions

  • Locked dependency version url = 1.7

    This can easily cause a dependency resolution conflict. If you must work around a semver-breaking dependency that can't be yanked, use a range of versions or fork it.

    url versions

  • Dependency http ^0.2 is outdated

    Upgrade to 1.3.0 to get all the fixes, and avoid causing duplicate dependencies in projects.

    http versions

  • Dependency hyper ^ 0.14 is outdated

    Upgrade to 1.6.0 to get all the fixes, and avoid causing duplicate dependencies in projects.

    hyper versions

  • Dependency itertools ^ 0.10 is outdated

    Upgrade to 0.14.0 to get all the fixes, and avoid causing duplicate dependencies in projects.

    itertools versions

  • Missing categories

    Categories improve browsing of lib.rs and crates.io. Add categories = ["web-programming"] to the Cargo.toml.

    Even if there are no categories that fit precisely, pick one that is least bad. You can also propose new categories in crates.io issue tracker.

    List of available categories

• anni-repo

  • Dependency lindera-core 0.27.2 is significantly outdated

    Upgrade to 0.33.0 to get all the fixes, and avoid causing duplicate dependencies in projects.

    lindera-core versions

  • Dependency lindera-dictionary 0.27.2 is significantly outdated

    Upgrade to 0.42.2 to get all the fixes, and avoid causing duplicate dependencies in projects.

    lindera-dictionary versions

  • Dependency rusqlite 0.30.0 is significantly outdated

    Upgrade to 0.35.0 to get all the fixes, and avoid causing duplicate dependencies in projects.

    rusqlite versions

  • Dependency tantivy 0.21.1 is significantly outdated

    Upgrade to 0.24.1 to get all the fixes, and avoid causing duplicate dependencies in projects.

    tantivy versions

  • Dependency toml 0.7.3 is significantly outdated

    Upgrade to 0.8.22 to get all the fixes, and avoid causing duplicate dependencies in projects.

    toml versions

  • Dependency toml_edit 0.21.0 is significantly outdated

    Upgrade to 0.22.26 to get all the fixes, and avoid causing duplicate dependencies in projects.

    toml_edit versions

  • Published crate doesn't match its repository

    Partially verified 51 files (includes 2 Cargo-generated).

    Looked for the crate in anni-repo/. Fetched https://github.com/projectanni/anni.git 679347014b3772e13339a25c063924dca7559a7a.

    Checked on 2024-08-04

    This check is experimental.

    Forum thread

  • Dependency git2 0.18.1 is outdated

    Upgrade to 0.20.2 to get all the fixes, and avoid causing duplicate dependencies in projects.

    git2 versions

  • Dependency lindera-tantivy 0.27.1 is outdated

    Upgrade to 0.42.2 to get all the fixes, and avoid causing duplicate dependencies in projects.

    lindera-tantivy versions

  • Dependency serde_rusqlite 0.34.0 is outdated

    Upgrade to 0.38.0 to get all the fixes, and avoid causing duplicate dependencies in projects.

    serde_rusqlite versions

  • Imprecise dependency requirement once_cell = 1

    Cargo does not always pick latest versions of dependencies! Specify the version as once_cell = "1.21.0". If Cargo.lock ends up having an unexpectedly old version of the dependency, you might get a dependency that lacks features/APIs or important bugfixes that you depend on. This is most likely to happen when using the minimal-versions flag, used by users of old Rust versions.

    If you want to keep using truly minimal dependency requirements, please make sure you test them in CI with -Z minimal-versions Cargo option, because it's very easy to accidentally use a feature added in a later version.

    once_cell versions

  • Missing keywords

    Help users find your crates. Add keywords = ["repo", "anni", "flac", "db-read", "publish"] (up to 5) to the Cargo.toml. Best keywords are alternative terms or their spellings that aren't in the name or description. Also add a keyword that precisely categorizes this crate and groups it with other similar crates.

  • Optional dependency 'serde_rusqlite' exposed as an implicit feature

    Cargo automatically makes publicly-available crate features for every optional dependency, unless the dependencies are referenced using dep: syntax. Features 'serde_rusqlite', 'tantivy', 'rusqlite', 'anni-flac', 'lindera-tantivy', 'git2-ureq', 'git2', 'alphanumeric-sort', 'serde_json', 'lindera-dictionary', 'lindera-core' may have been unintentional.

    Crate features

• clap-handler, iori-ssa, git2-ureq, anni-vgmdb, anni-workspace, anni-fetch, iori

  • Missing categories

    Categories improve browsing of lib.rs and crates.io. Add categories = ["…"] to the Cargo.toml.

    List of available categories

• clap-handler

  • Published crate doesn't match its repository

    Partially verified 12 files (includes 3 Cargo-generated).

    Files in the crates.io crate compared to the repository:

    • Cargo.lock not found.

    Fetched https://github.com/projectanni/clap-handler.git 81a86611e8a767a62a356ea547861e6834a93d76.

    Checked on 2025-04-08

    Forum thread

  • Optional dependency 'async-trait' exposed as an implicit feature

    Cargo automatically makes publicly-available crate features for every optional dependency, unless the dependencies are referenced using dep: syntax. Feature 'async-trait' may have been unintentional.

    Crate features

• iori-ssa

  • Published crate doesn't match its repository

    Verified 17 out of 18 files (includes 3 Cargo-generated).

    Files in the crates.io crate compared to the repository:

    • Cargo.lock not found.
    • README.md exists, but elsewhere in the repo.

    Looked for the crate in crates/ssa/. Fetched https://github.com/yesterday17/iori.git tagged ssadecrypt-v0.2.0 (3e15469fa0103939a3664d9b1072533e71dd949c).

    Checked on 2025-02-23

    Forum thread

  • Missing keywords

    Help users find your crates. Add keywords = ["iori-ssa", "iori", "ssa", "downloader"] (up to 5) to the Cargo.toml. Best keywords are alternative terms or their spellings that aren't in the name or description. Also add a keyword that precisely categorizes this crate and groups it with other similar crates.

• anni-common

  • Dependency trash 3.0.1 is outdated

    Upgrade to 5.2.0 to get all the fixes, and avoid causing duplicate dependencies in projects.

    trash versions

  • Failed to verify create's content against its repository

    Partially verified 15 files (includes 2 Cargo-generated).

    • warning: The crates.io package has no information about its path inside its repository.
    • warning: There is no matching git tag containing version '0.2.0'.
      • git tag v0.2.0 a5591b4f3bf7bd26d51ce72a16e4382cafc31e11; git push origin --tags

    Looked for the crate in anni-common/. Fetched https://github.com/projectanni/anni.git a5591b4f3bf7bd26d51ce72a16e4382cafc31e11.

    Checked on 2025-04-28

    Forum thread

  • Imprecise dependency requirement byteorder = 1

    Cargo does not always pick latest versions of dependencies! Specify the version as byteorder = "1.5.0". If Cargo.lock ends up having an unexpectedly old version of the dependency, you might get a dependency that lacks features/APIs or important bugfixes that you depend on. This is most likely to happen when using the minimal-versions flag, used by users of old Rust versions.

    byteorder versions

  • Missing keywords

    Help users find your crates. Add keywords = ["anni", "anni-common", "flac", "music", "anniversary"] (up to 5) to the Cargo.toml. Best keywords are alternative terms or their spellings that aren't in the name or description. Also add a keyword that precisely categorizes this crate and groups it with other similar crates.

• anni-workspace

  • Dependency toml 0.7.3 is significantly outdated

    Upgrade to 0.8.22 to get all the fixes, and avoid causing duplicate dependencies in projects.

    toml versions

  • Published crate doesn't match its repository

    Partially verified 10 files (includes 2 Cargo-generated).

    Looked for the crate in anni-workspace/. Fetched https://github.com/projectanni/anni.git 0e2646a54557115c26ae7de4631337909d472cc5.

    Checked on 2024-08-10

    Forum thread

  • Dependency anni-common 0.1.4 is outdated

    Consider upgrading to 0.2.0 to get all the fixes and improvements.

    anni-common versions

  • Imprecise dependency requirement uuid = 1

    Cargo does not always pick latest versions of dependencies! Specify the version as uuid = "1.16.0". If Cargo.lock ends up having an unexpectedly old version of the dependency, you might get a dependency that lacks features/APIs or important bugfixes that you depend on. This is most likely to happen when using the minimal-versions flag, used by users of old Rust versions.

    uuid versions

  • Missing keywords

    Help users find your crates. Add keywords = ["anni", "workspace", "anni-workspace"] (up to 5) to the Cargo.toml. Best keywords are alternative terms or their spellings that aren't in the name or description. Also add a keyword that precisely categorizes this crate and groups it with other similar crates.

• anni-provider, anni-flac, annil, iori

  • Imprecise dependency requirement tokio = 1

    Cargo does not always pick latest versions of dependencies! Specify the version as tokio = "1.45.0". If Cargo.lock ends up having an unexpectedly old version of the dependency, you might get a dependency that lacks features/APIs or important bugfixes that you depend on. This is most likely to happen when using the minimal-versions flag, used by users of old Rust versions.

    tokio versions

• anni-provider, anni-common, clap-handler-derive

  • No readme property

    Specify path to a README file for the project, so that information about is included in the crates.io tarball.

• anni-provider, anni-repo, anni-common, anni-flac, annil

  • Missing categories

    Categories improve browsing of lib.rs and crates.io. Add categories = ["multimedia::audio"] to the Cargo.toml.

    List of available categories

• git2-ureq

  • Published crate doesn't match its repository

    Verified 8 out of 9 files (includes 2 Cargo-generated).

    Files in the crates.io crate compared to the repository:

    • README.md exists, but elsewhere in the repo.

    Fetched https://github.com/projectanni/git2-ureq.git 176940a91773808ca472715f8349b5f00cca6c2d.

    Checked on 2024-07-28

    Forum thread

  • Dependency git2 0.18 is outdated

    Upgrade to 0.20.2 to get all the fixes, and avoid causing duplicate dependencies in projects.

    git2 versions

  • Dependency ureq 2.8.0 is a bit outdated

    Consider upgrading to 3.0.11 to get all the fixes and improvements.

    ureq versions

  • Missing keywords

    Help users find your crates. Add keywords = ["git2", "ureq", "git2-ureq"] (up to 5) to the Cargo.toml. Best keywords are alternative terms or their spellings that aren't in the name or description. Also add a keyword that precisely categorizes this crate and groups it with other similar crates.

• anni-fetch

  • Dependency miniz_oxide 0.4.4 is significantly outdated

    Upgrade to 0.8.8 to get all the fixes, and avoid causing duplicate dependencies in projects.

    miniz_oxide versions

  • Dependency sha-1 0.9.4 has issues

    It may not be actively developed any more. Consider changing the dependency.

    sha-1 crate

  • Dependency ureq 2 is a bit outdated

    Consider upgrading to 3.0.11 to get all the fixes and improvements.

    ureq versions

  • Latest stable release is old

    It's been over 4 years. Is this crate still maintained? Make a new release, either to refresh it, or to set

    [badges.maintenance]
    status = "deprecated"
    

    (or "as-is", "passively-maintained").

    If the crate is truly stable, why not make a 1.0.0 release?

    Maintenance status field docs

• anni-flac

  • Dependency image 0.24 is outdated

    Upgrade to 0.25.6 to get all the fixes, and avoid causing duplicate dependencies in projects.

    image versions

  • Dependency num-derive 0.3 is outdated

    Upgrade to 0.4.2 to get all the fixes, and avoid causing duplicate dependencies in projects.

    num-derive versions

  • Dependency thiserror 1 is a bit outdated

    Consider upgrading to 2.0.12 to get all the fixes and improvements.

    thiserror versions

  • Missing keywords

    Help users find your crates. Add keywords = ["reserved", "flac", "anni"] (up to 5) to the Cargo.toml. Best keywords are alternative terms or their spellings that aren't in the name or description. Also add a keyword that precisely categorizes this crate and groups it with other similar crates.

• anni-artist

  • Missing categories

    Categories improve browsing of lib.rs and crates.io. Add categories = ["parsing"] to the Cargo.toml.

    List of available categories

  • Missing keywords

    Help users find your crates. Add keywords = ["artist", "anni-artist", "anni", "define", "麻倉もも"] (up to 5) to the Cargo.toml. Best keywords are alternative terms or their spellings that aren't in the name or description. Also add a keyword that precisely categorizes this crate and groups it with other similar crates.

• annil

  • Dependency toml 0.7.0 is significantly outdated

    Upgrade to 0.8.22 to get all the fixes, and avoid causing duplicate dependencies in projects.

    toml versions

  • Dependency anni-provider 0.2.0 is slightly outdated

    Consider upgrading to 0.3.1 to get all the fixes and improvements.

    anni-provider versions

  • Dependency anni-repo 0.3.0 is outdated

    Upgrade to 0.4.2 to get all the fixes, and avoid causing duplicate dependencies in projects.

    anni-repo versions

  • Dependency axum 0.6.1 is outdated

    Upgrade to 0.8.4 to get all the fixes, and avoid causing duplicate dependencies in projects.

    axum versions

  • Dependency base64 0.21.0 is outdated

    Upgrade to 0.22.1 to get all the fixes, and avoid causing duplicate dependencies in projects.

    base64 versions

  • Dependency env_logger 0.10.0 is outdated

    Upgrade to 0.11.8 to get all the fixes, and avoid causing duplicate dependencies in projects.

    env_logger versions

  • Dependency jwt-simple 0.11.0 is outdated

    Upgrade to 0.12.12 to get all the fixes, and avoid causing duplicate dependencies in projects.

    jwt-simple versions

  • Dependency tower-http 0.4.0 is outdated

    Upgrade to 0.6.4 to get all the fixes, and avoid causing duplicate dependencies in projects.

    tower-http versions

  • Missing keywords

    Help users find your crates. Add keywords = ["annil", "anni", "key", "music", "flac"] (up to 5) to the Cargo.toml. Best keywords are alternative terms or their spellings that aren't in the name or description. Also add a keyword that precisely categorizes this crate and groups it with other similar crates.

  • Optional dependency 'anni-repo' exposed as an implicit feature

    Cargo automatically makes publicly-available crate features for every optional dependency, unless the dependencies are referenced using dep: syntax. Feature 'anni-repo' may have been unintentional.

    Crate features

• clap-handler-derive

  • Published crate doesn't match its repository

    Partially verified 5 files (includes 3 Cargo-generated).

    Files in the crates.io crate compared to the repository:

    • Cargo.lock not found.

    Looked for the crate in clap-handler-derive/. Fetched https://github.com/projectanni/clap-handler.git 81a86611e8a767a62a356ea547861e6834a93d76.

    Checked on 2025-04-27

    Forum thread

  • Dependency syn 1.0 is significantly outdated

    Upgrade to 2.0.101 to get all the fixes, and avoid causing duplicate dependencies in projects.

    syn versions

• anni-vgmdb

  • Dependency reqwest 0.11.13 is outdated

    Upgrade to 0.12.15 to get all the fixes, and avoid causing duplicate dependencies in projects.

    reqwest versions

• anni-flac, anni-workspace, annil, iori

  • README missing from crate tarball

    Cargo sometimes fails to package the README file. Ensure the path to the README in Cargo.toml is valid, and points to a file inside the crate's directory.

• iori

  • Published crate doesn't match its repository

    Partially verified 19 files (includes 3 Cargo-generated).

    Files in the crates.io crate compared to the repository:

    • Cargo.lock not found.

    Looked for the crate in crates/iori/. Fetched https://github.com/yesterday17/iori.git e93b146b5fa7a1f4382ba44df811dfec888e6023.

    Checked on 2024-08-10

    Forum thread

  • Dependency m3u8-rs 5.0.5 is outdated

    Upgrade to 6.0.0 to get all the fixes, and avoid causing duplicate dependencies in projects.

    m3u8-rs versions

  • Dependency rand 0.8.5 is a bit outdated

    Consider upgrading to 0.9.1 to get all the fixes and improvements.

    rand versions

  • Dependency reqwest 0.11.24 is outdated

    Upgrade to 0.12.15 to get all the fixes, and avoid causing duplicate dependencies in projects.

    reqwest versions

  • Dependency thiserror 1.0.57 is a bit outdated

    Consider upgrading to 2.0.12 to get all the fixes and improvements.

    thiserror versions

  • Missing keywords

    Help users find your crates. Add keywords = ["downloader", "iori", "m3u8", "iori-minyami"] (up to 5) to the Cargo.toml. Best keywords are alternative terms or their spellings that aren't in the name or description. Also add a keyword that precisely categorizes this crate and groups it with other similar crates.

• shiori

  • Crate contains junk files

    The crate contains boilerplate Rust files with no real functionality.

If some of these crates are unmaintained and shouldn't be checked, yank them or add [badges.maintenance]
status = "deprecated" to their Cargo.toml.