Lib.rs

Issues found

Based on crates you own that have been published to crates.io. The best way to monitor these issues is to subscribe to the atom feed in your RSS reader.

• veilid-hashlink

  • Dependency hashbrown 0.14.3 is significantly outdated

    Upgrade to 0.15.3 to get all the fixes, and avoid causing duplicate dependencies in projects.

    In Cargo, different 0.x versions are considered incompatible, so this is a semver-major upgrade.

    hashbrown versions

  • Published crate doesn't match its repository

    Partially verified 18 files (includes 2 Cargo-generated).

    Fetched https://gitlab.com/veilid/hashlink.git 38ed917cdc9216b23d4098e3c67892156e8380f0.

    Checked on 2024-09-29

    This check is experimental.

    Forum thread

  • Missing categories

    Categories improve browsing of lib.rs and crates.io. Add categories = ["data-structures"] to the Cargo.toml.

    Even if there are no categories that fit precisely, pick one that is least bad. You can also propose new categories in crates.io issue tracker.

    List of available categories

  • Optional dependency 'serde' exposed as an implicit feature

    Cargo automatically makes publicly-available crate features for every optional dependency, unless the dependencies are referenced using dep: syntax. Feature 'serde' may have been unintentional.

    Crate features

  • Using outdated edition for no reason

    We estimate that this crate requires at least Rust 1.71, which is newer than the last 2018-edition compiler. You can upgrade without breaking any compatibility. Run cargo fix --edition and update edition="…" in Cargo.toml.

    Using the latest edition helps avoid old quirks of the compiler, and ensures Rust code has consistent syntax and behavior across all projects.

    The Edition Guide

• veilid-core, veilid-tools, keyring-manager

  • Published crate contains binary files

    The crate contains binary files (JAR file). Crates are meant to be compiled from source. Please check that you haven't published temporary build files by accident. If you have test fixtures, consider excluding them from crates-io tarball, since Cargo doesn't run tests from crates-io packages.

    Audit page

• veilid-tools

  • Dependency android_logger 0.13.3 is significantly outdated

    Upgrade to 0.15.0 to get all the fixes, and avoid causing duplicate dependencies in projects.

    android_logger versions

  • Dependency async-io 1.13.0 is significantly outdated

    Upgrade to 2.4.0 to get all the fixes, and avoid causing duplicate dependencies in projects.

    Easy way to bump dependencies: cargo install cargo-edit; cargo upgrade -i; Also check out Dependabot service on GitHub.

    async-io versions

  • Dependency async-std 1.13.0 has issues

    It may not be actively developed any more. Consider changing the dependency.

    async-std crate

  • Dependency netlink-sys =0.8.5 is significantly outdated

    Upgrade to 0.8.7 to get all the fixes, and avoid causing duplicate dependencies in projects.

    netlink-sys versions

  • Dependency nix 0.27.1 is significantly outdated

    Upgrade to 0.30.0 to get all the fixes, and avoid causing duplicate dependencies in projects.

    nix versions

  • Dependency time 0.3.38 is significantly outdated

    Upgrade to 0.3.41 to get all the fixes, and avoid causing duplicate dependencies in projects.

    time versions

  • Dependency tracing-oslog 0.1.2 is significantly outdated

    Upgrade to 0.2.0 to get all the fixes, and avoid causing duplicate dependencies in projects.

    tracing-oslog versions

  • Dependency validator 0.19.0 is significantly outdated

    Upgrade to 0.20.0 to get all the fixes, and avoid causing duplicate dependencies in projects.

    validator versions

  • Locked dependency version netlink-packet-route =0.17.1

    This can easily cause a dependency resolution conflict. If you must work around a semver-breaking dependency that can't be yanked, use a range of versions or fork it.

    netlink-packet-route versions

  • Locked dependency version netlink-sys =0.8.5

    This can easily cause a dependency resolution conflict. If you must work around a semver-breaking dependency that can't be yanked, use a range of versions or fork it.

    netlink-sys versions

  • Locked dependency version rtnetlink =0.13.1

    This can easily cause a dependency resolution conflict. If you must work around a semver-breaking dependency that can't be yanked, use a range of versions or fork it.

    rtnetlink versions

  • Dependency async-tungstenite 0.28.2 is outdated

    Upgrade to 0.29.1 to get all the fixes, and avoid causing duplicate dependencies in projects.

    async-tungstenite versions

  • Dependency getrandom 0.2 is outdated

    Upgrade to 0.3.2 to get all the fixes, and avoid causing duplicate dependencies in projects.

    getrandom versions

  • Dependency imbl 3.0.0 is outdated

    Upgrade to 5.0.0 to get all the fixes, and avoid causing duplicate dependencies in projects.

    imbl versions

  • Dependency jni-sys 0.3.0 is slightly outdated

    Consider upgrading to 0.4.0 to get all the fixes and improvements.

    jni-sys versions

  • Dependency ndk 0.7.0 is outdated

    Upgrade to 0.9.0 to get all the fixes, and avoid causing duplicate dependencies in projects.

    ndk versions

  • Dependency netlink-packet-route =0.17.1 is a bit outdated

    Consider upgrading to 0.23.0 to get all the fixes and improvements.

    netlink-packet-route versions

  • Dependency rand 0.8.5 is a bit outdated

    Consider upgrading to 0.9.1 to get all the fixes and improvements.

    rand versions

  • Dependency rand_chacha 0.3.1 is outdated

    Upgrade to 0.9.0 to get all the fixes, and avoid causing duplicate dependencies in projects.

    rand_chacha versions

  • Dependency rand_core 0.6.4 is a bit outdated

    Consider upgrading to 0.9.3 to get all the fixes and improvements.

    rand_core versions

  • Dependency rtnetlink =0.13.1 is slightly outdated

    Consider upgrading to 0.16.0 to get all the fixes and improvements.

    rtnetlink versions

  • Dependency thiserror 1.0.69 is a bit outdated

    Consider upgrading to 2.0.12 to get all the fixes and improvements.

    thiserror versions

  • Imprecise dependency requirement ctrlc = ^3

    Cargo does not always pick latest versions of dependencies! Specify the version as ctrlc = "3.4.0". If Cargo.lock ends up having an unexpectedly old version of the dependency, you might get a dependency that lacks features/APIs or important bugfixes that you depend on. This is most likely to happen when using the minimal-versions flag, used by users of old Rust versions.

    If you want to keep using truly minimal dependency requirements, please make sure you test them in CI with -Z minimal-versions Cargo option, because it's very easy to accidentally use a feature added in a later version.

    ctrlc versions

  • Missing categories

    Categories improve browsing of lib.rs and crates.io. Add categories = ["network-programming"] to the Cargo.toml.

    List of available categories

  • Missing keywords

    Help users find your crates. Add keywords = ["veilid", "networking", "veilid-tools", "applications", "run-time"] (up to 5) to the Cargo.toml. Best keywords are alternative terms or their spellings that aren't in the name or description. Also add a keyword that precisely categorizes this crate and groups it with other similar crates.

  • No readme property

    Specify path to a README file for the project, so that information about is included in the crates.io tarball.

  • Optional dependency 'async-std' exposed as an implicit feature

    Cargo automatically makes publicly-available crate features for every optional dependency, unless the dependencies are referenced using dep: syntax. Features 'async-std', 'tokio', 'tokio-stream', 'ws_stream_wasm', 'tokio-util' may have been unintentional.

    Crate features

• veilid-core

  • Dependency async-std 1.13.0 has issues

    It may not be actively developed any more. Consider changing the dependency.

    async-std crate

  • Dependency async-tungstenite 0.27.0 is significantly outdated

    Upgrade to 0.29.1 to get all the fixes, and avoid causing duplicate dependencies in projects.

    async-tungstenite versions

  • Dependency nix 0.27.1 is significantly outdated

    Upgrade to 0.30.0 to get all the fixes, and avoid causing duplicate dependencies in projects.

    nix versions

  • Dependency tracing-oslog 0.1.2 is significantly outdated

    Upgrade to 0.2.0 to get all the fixes, and avoid causing duplicate dependencies in projects.

    tracing-oslog versions

  • Dependency windows 0.51.1 is significantly outdated

    Upgrade to 0.61.1 to get all the fixes, and avoid causing duplicate dependencies in projects.

    windows versions

  • Dependency capnp 0.19.8 is outdated

    Upgrade to 0.21.0 to get all the fixes, and avoid causing duplicate dependencies in projects.

    capnp versions

  • Dependency capnpc 0.19.0 is outdated

    Consider upgrading to 0.21.0 to get all the fixes and improvements.

    capnpc versions

  • Dependency config 0.13.4 is outdated

    Upgrade to 0.15.11 to get all the fixes, and avoid causing duplicate dependencies in projects.

    config versions

  • Dependency directories 5.0.1 is outdated

    Consider upgrading to 6.0.0 to get all the fixes and improvements.

    directories versions

  • Dependency getrandom 0.2.15 is outdated

    Upgrade to 0.3.2 to get all the fixes, and avoid causing duplicate dependencies in projects.

    getrandom versions

  • Dependency hickory-resolver 0.24.4 is outdated

    Consider upgrading to 0.25.1 to get all the fixes and improvements.

    hickory-resolver versions

  • Dependency jni-sys 0.3.0 is slightly outdated

    Consider upgrading to 0.4.0 to get all the fixes and improvements.

    jni-sys versions

  • Dependency maxminddb 0.24.0 is outdated

    Upgrade to 0.26.0 to get all the fixes, and avoid causing duplicate dependencies in projects.

    maxminddb versions

  • Dependency ndk 0.7.0 is outdated

    Upgrade to 0.9.0 to get all the fixes, and avoid causing duplicate dependencies in projects.

    ndk versions

  • Dependency reqwest 0.11 is outdated

    Upgrade to 0.12.15 to get all the fixes, and avoid causing duplicate dependencies in projects.

    reqwest versions

  • Dependency rustls 0.21.12 is outdated

    Upgrade to 0.23.26 to get all the fixes, and avoid causing duplicate dependencies in projects.

    rustls versions

  • Dependency rustls-pemfile 1.0.4 is outdated

    Upgrade to 2.2.0 to get all the fixes, and avoid causing duplicate dependencies in projects.

    rustls-pemfile versions

  • Dependency sanitize-filename 0.5.0 is outdated

    Upgrade to 0.6.0 to get all the fixes, and avoid causing duplicate dependencies in projects.

    sanitize-filename versions

  • Dependency sysinfo ^0.30.13 is outdated

    Upgrade to 0.35.0 to get all the fixes, and avoid causing duplicate dependencies in projects.

    sysinfo versions

  • Dependency thiserror 1.0.69 is a bit outdated

    Consider upgrading to 2.0.12 to get all the fixes and improvements.

    thiserror versions

  • Dependency tsify 0.4.5 is slightly outdated

    Consider upgrading to 0.5.5 to get all the fixes and improvements.

    tsify versions

  • Dependency webpki-roots 0.25.4 is outdated

    Upgrade to 0.26.10 to get all the fixes, and avoid causing duplicate dependencies in projects.

    webpki-roots versions

  • Missing categories

    Categories improve browsing of lib.rs and crates.io. Add categories = ["database"] to the Cargo.toml.

    List of available categories

  • Missing keywords

    Help users find your crates. Add keywords = ["veilid", "applications", "signature", "node", "framework"] (up to 5) to the Cargo.toml. Best keywords are alternative terms or their spellings that aren't in the name or description. Also add a keyword that precisely categorizes this crate and groups it with other similar crates.

  • No readme property

    Specify path to a README file for the project, so that information about is included in the crates.io tarball.

  • Optional dependency 'reqwest' exposed as an implicit feature

    Cargo automatically makes publicly-available crate features for every optional dependency, unless the dependencies are referenced using dep: syntax. Features 'reqwest', 'hickory-resolver', 'async-std', 'maxminddb', 'tokio', 'tokio-stream', 'async-std-resolver', 'tokio-util' may have been unintentional.

    Crate features

• veilid-igd

  • Dependency async-std 1 has issues

    It may not be actively developed any more. Consider changing the dependency.

    async-std crate

  • Published crate doesn't match its repository

    Partially verified 29 files (includes 3 Cargo-generated).

    Files in the crates.io crate compared to the repository:

    • Cargo.lock not found.

    Fetched https://gitlab.com/veilid/rust-igd.git 64409460d4af5154dc9198798a5cfa5934156b93.

    Checked on 2024-08-10

    Forum thread

  • Dependency attohttpc 0.24 is outdated

    Consider upgrading to 0.29.2 to get all the fixes and improvements.

    attohttpc versions

  • Dependency http 0.2 is outdated

    Upgrade to 1.3.0 to get all the fixes, and avoid causing duplicate dependencies in projects.

    http versions

  • Dependency hyper 0.14 is outdated

    Upgrade to 1.6.0 to get all the fixes, and avoid causing duplicate dependencies in projects.

    hyper versions

  • Dependency rand 0.8 is a bit outdated

    Consider upgrading to 0.9.1 to get all the fixes and improvements.

    rand versions

  • Dependency xmltree 0.10 is a bit outdated

    Consider upgrading to 0.11.0 to get all the fixes and improvements.

    xmltree versions

  • Imprecise dependency requirement url = 2

    Cargo does not always pick latest versions of dependencies! Specify the version as url = "2.5.0". If Cargo.lock ends up having an unexpectedly old version of the dependency, you might get a dependency that lacks features/APIs or important bugfixes that you depend on. This is most likely to happen when using the minimal-versions flag, used by users of old Rust versions.

    url versions

• keyvaluedb, keyvaluedb-shared-tests, keyvaluedb-memorydb, keyvaluedb-sqlite, keyvaluedb-web, keyring-manager

  • No repository property

    Specify git repository URL in Cargo.toml to help users find more information, contribute, and for lib.rs to read more info.

• keyvaluedb, keyvaluedb-shared-tests, keyvaluedb-memorydb, veilid-igd

  • Missing categories

    Categories improve browsing of lib.rs and crates.io. Add categories = ["…"] to the Cargo.toml.

    List of available categories

• veilid-bugsalot

  • Published crate doesn't match its repository

    Partially verified 13 files (includes 2 Cargo-generated).

    Fetched https://gitlab.com/veilid/bugsalot.git a55887ad56ad52ac6ae94dd9a86e8a66bf8b7149.

    Checked on 2024-08-10

    Forum thread

  • Using outdated edition for no reason

    We estimate that this crate requires at least Rust 1.57, which is newer than the last 2018-edition compiler. You can upgrade without breaking any compatibility. Run cargo fix --edition and update edition="…" in Cargo.toml.

    The Edition Guide

• veilid-async-tls

  • Dependency rustls 0.21 is outdated

    Upgrade to 0.23.26 to get all the fixes, and avoid causing duplicate dependencies in projects.

    rustls versions

  • Dependency rustls-pemfile 1.0 is outdated

    Upgrade to 2.2.0 to get all the fixes, and avoid causing duplicate dependencies in projects.

    rustls-pemfile versions

  • Dependency rustls-webpki 0.101.4 is outdated

    Upgrade to 0.103.1 to get all the fixes, and avoid causing duplicate dependencies in projects.

    rustls-webpki versions

  • Dependency webpki-roots 0.22.3 is outdated

    Upgrade to 0.26.10 to get all the fixes, and avoid causing duplicate dependencies in projects.

    webpki-roots versions

  • Failed to verify create's content against its repository

    Verified 24 out of 29 files (includes 2 Cargo-generated).

    • warning: The crates.io package has no information about its path inside its repository.
    • warning: Could not find Cargo.toml for this package in its repo (via tags).
      • Make sure the repository URL in Cargo.toml is correct
    • warning: Could not discover crate's location in its repository (via tags).

    Files in the crates.io crate compared to the repository:

    • Cargo.toml.orig does not match the repository.
    • README.md does not match the repository.
    • connector.rs does not match the repository.
    • tests/
      • test.rs does not match the repository.
      • google.rs does not match the repository.

    Fetched https://github.com/async-rs/async-tls.git tagged v0.12.0 (b9400e6204d6dc85a85c7ee8f2a5450997f769e6).

    Checked on 2024-07-28

    Forum thread

  • License MIT/Apache-2.0 is not in SPDX syntax

    Use OR instead of /.

    SPDX license list

  • Missing keywords

    Help users find your crates. Add keywords = ["tls", "async-tls", "veilid-async-tls", "notice", "async-write"] (up to 5) to the Cargo.toml. Best keywords are alternative terms or their spellings that aren't in the name or description. Also add a keyword that precisely categorizes this crate and groups it with other similar crates.

• keyvaluedb-web

  • Dependency async-lock 2.8.0 is significantly outdated

    Upgrade to 3.4.0 to get all the fixes, and avoid causing duplicate dependencies in projects.

    async-lock versions

  • Imprecise dependency requirement web-sys = ^0

    Cargo does not always pick latest versions of dependencies! Specify the version as web-sys = "0.3.77". If Cargo.lock ends up having an unexpectedly old version of the dependency, you might get a dependency that lacks features/APIs or important bugfixes that you depend on. This is most likely to happen when using the minimal-versions flag, used by users of old Rust versions.

    web-sys versions

  • Missing categories

    Categories improve browsing of lib.rs and crates.io. Add categories = ["web-programming"] to the Cargo.toml.

    List of available categories

  • Missing keywords

    Help users find your crates. Add keywords = ["browser", "keyvaluedb-web", "key-value-database"] (up to 5) to the Cargo.toml. Best keywords are alternative terms or their spellings that aren't in the name or description. Also add a keyword that precisely categorizes this crate and groups it with other similar crates.

• keyring-manager

  • Dependency core-foundation 0.9.3 is a bit outdated

    Consider upgrading to 0.10.0 to get all the fixes and improvements.

    core-foundation versions

  • Dependency directories 5.0.1 is outdated

    Consider upgrading to 6.0.0 to get all the fixes and improvements.

    directories versions

  • Dependency fs4 0.6.6 is outdated

    Upgrade to 0.13.1 to get all the fixes, and avoid causing duplicate dependencies in projects.

    fs4 versions

  • Dependency ndk ^0.7 is outdated

    Upgrade to 0.9.0 to get all the fixes, and avoid causing duplicate dependencies in projects.

    ndk versions

  • Dependency secret-service 2.0.2 is outdated

    Upgrade to 5.0.0 to get all the fixes, and avoid causing duplicate dependencies in projects.

    secret-service versions

  • Dependency security-framework 2.9.2 is a bit outdated

    Consider upgrading to 3.2.0 to get all the fixes and improvements.

    security-framework versions

  • Imprecise dependency requirement android_logger = ^0

    Cargo does not always pick latest versions of dependencies! Specify the version as android_logger = "0.15.0". If Cargo.lock ends up having an unexpectedly old version of the dependency, you might get a dependency that lacks features/APIs or important bugfixes that you depend on. This is most likely to happen when using the minimal-versions flag, used by users of old Rust versions.

    android_logger versions

  • Missing categories

    Categories improve browsing of lib.rs and crates.io. Add categories = ["authentication"] to the Cargo.toml.

    List of available categories

  • Optional dependency 'android_logger' exposed as an implicit feature

    Cargo automatically makes publicly-available crate features for every optional dependency, unless the dependencies are referenced using dep: syntax. Features 'android_logger', 'simplelog', 'backtrace' may have been unintentional.

    Crate features

• keyvaluedb, keyvaluedb-shared-tests, keyvaluedb-memorydb, keyvaluedb-sqlite, keyvaluedb-web, veilid-wasm, veilid-flutter

  • README missing from crate tarball

    Cargo sometimes fails to package the README file. Ensure the path to the README in Cargo.toml is valid, and points to a file inside the crate's directory.

• veilid-async-tungstenite

  • Dependency async-std 1.0 has issues

    It may not be actively developed any more. Consider changing the dependency.

    async-std crate

  • Dependency gio 0.18 is outdated

    Upgrade to 0.20.9 to get all the fixes, and avoid causing duplicate dependencies in projects.

    gio versions

  • Dependency glib 0.18 is outdated

    Upgrade to 0.20.9 to get all the fixes, and avoid causing duplicate dependencies in projects.

    glib versions

  • Dependency rustls-native-certs 0.6 is outdated

    Upgrade to 0.8.1 to get all the fixes, and avoid causing duplicate dependencies in projects.

    rustls-native-certs versions

  • Dependency tokio-rustls 0.24 is outdated

    Upgrade to 0.26.2 to get all the fixes, and avoid causing duplicate dependencies in projects.

    tokio-rustls versions

  • Dependency tungstenite 0.20 is outdated

    Upgrade to 0.26.2 to get all the fixes, and avoid causing duplicate dependencies in projects.

    tungstenite versions

  • Dependency webpki-roots 0.25 is outdated

    Upgrade to 0.26.10 to get all the fixes, and avoid causing duplicate dependencies in projects.

    webpki-roots versions

  • Failed to verify create's content against its repository

    Verified 32 out of 33 files (includes 3 Cargo-generated).

    • warning: Could not find Cargo.toml for this package in its repo (via tags).
      • Make sure the repository URL in Cargo.toml is correct

    Files in the crates.io crate compared to the repository:

    • Cargo.lock not found.
    • Cargo.toml.orig does not match the repository.

    Fetched https://github.com/sdroege/async-tungstenite.git tagged 0.23.0 (c4fb3afb8a94f2c89508c45bbd09215097b315bc).

    Checked on 2024-07-28

    Forum thread

  • Optional dependency 'real-tokio-openssl' exposed as an implicit feature

    Cargo automatically makes publicly-available crate features for every optional dependency, unless the dependencies are referenced using dep: syntax. Features 'real-tokio-openssl', 'async-std', 'openssl', 'gio', 'glib', 'real-async-native-tls', 'real-tokio-rustls', 'real-native-tls', 'rustls-native-certs', 'tokio', 'real-async-tls', 'webpki-roots', 'real-tokio-native-tls' may have been unintentional.

    Crate features

  • Using outdated edition for no reason

    We estimate that this crate requires at least Rust 1.70, which is newer than the last 2018-edition compiler. You can upgrade without breaking any compatibility. Run cargo fix --edition and update edition="…" in Cargo.toml.

    The Edition Guide

• keyvaluedb-sqlite

  • Dependency rusqlite 0.29.0 is outdated

    Upgrade to 0.35.0 to get all the fixes, and avoid causing duplicate dependencies in projects.

    rusqlite versions

  • Missing categories

    Categories improve browsing of lib.rs and crates.io. Add categories = ["database"] to the Cargo.toml.

    List of available categories

  • Missing keywords

    Help users find your crates. Add keywords = ["traits", "keyvaluedb-sqlite", "key-value-database"] (up to 5) to the Cargo.toml. Best keywords are alternative terms or their spellings that aren't in the name or description. Also add a keyword that precisely categorizes this crate and groups it with other similar crates.

• keyvaluedb

  • Missing keywords

    Help users find your crates. Add keywords = ["key-value-database", "read", "cache"] (up to 5) to the Cargo.toml. Best keywords are alternative terms or their spellings that aren't in the name or description. Also add a keyword that precisely categorizes this crate and groups it with other similar crates.

• keyvaluedb-shared-tests

  • Missing keywords

    Help users find your crates. Add keywords = ["keyvaluedb-shared-tests", "key-value-database", "testing"] (up to 5) to the Cargo.toml. Best keywords are alternative terms or their spellings that aren't in the name or description. Also add a keyword that precisely categorizes this crate and groups it with other similar crates.

• keyvaluedb-memorydb

  • Missing keywords

    Help users find your crates. Add keywords = ["traits", "keyvaluedb-memorydb", "key-value-database"] (up to 5) to the Cargo.toml. Best keywords are alternative terms or their spellings that aren't in the name or description. Also add a keyword that precisely categorizes this crate and groups it with other similar crates.

• veilid-wasm

  • Crate is 'reserved'

    Please be respectful of crates.io and don't squat crate names.

    It's OK if you intend to publish this project in the near future. Keep in mind that even if you have good intentions, things may not go as planned. crates.io won't reclaim abandoned crates, so reserving good names may end up wasting the good names.

• veilid-flutter

  • Crate is 'reserved'

    Please be respectful of crates.io and don't squat crate names.

No issues found in: veilid-tracing-wasm

If some of these crates are unmaintained and shouldn't be checked, yank them or add [badges.maintenance]
status = "deprecated" to their Cargo.toml.