rustsec patch: unmaintained

[psandana]

patch crate is unmaintained

patch crate owner is unreachable. Last version published was 0.7.0 about 2 years ago.
Bugs has been reported without being addressed, including panics.

Recommendation

The project has been forked and fixes applied:

• Repo: https://github.com/gitpatch-rs/gitpatch
• Crate: https://crates.io/crates/gitpatch

gitpatch version 0.7.1 is compatible with patch version 0.7.0 and should be a direct replacement.

References

• Maintenance help uniphil/patch-rs#29 (main discussion)
• Cannot parse patch that ends with newline character change and delta on the last line uniphil/patch-rs#23
• Panic when processing diff file with only file renames. uniphil/patch-rs#24
• Error on patches mentioning binary file differences uniphil/patch-rs#25
• Cannot parse diffstat generated by git format-patch uniphil/patch-rs#27

[djc]

Have you already reached out to the maintainer via email, that is, bypassing GitHub?

[psandana]

Have you already reached out to the maintainer via email, that is, bypassing GitHub?

No, I haven't. I'm against using personal e-mails for GH communications (I know you can get them from commits)

[djc]

It's been a very effective tool for me in contacting maintainers who don't respond to GitHub interactions. I think it's fine to use it for this purpose.

[psandana]

It's been a very effective tool for me in contacting maintainers who don't respond to GitHub interactions. I think it's fine to use it for this purpose.

Ok, I'm giving it a try. In your experience, what would be a good timeframe to wait for a response?

[djc]

Probably a week.

[psandana]

@djc one week has gone without responses. Any further option left?

[djc]

I noticed that the author is on Bluesky and is following me (and seems to be active there), so I've sent them a DM, let's see if that helps.

[psandana]

@djc any news?

[djc]

Used a reply on Bluesky to alert them to the DM -- they've been pretty active there so I still have some hope.

[psandana]

@djc thanks for your efforts. Owner responded and added a few folks (including myself) with contrib access to the repo. I will close this PR.