starred/komorebi
1
0 Fork 0
mirror of https://github.com/LGUG2Z/komorebi.git synced 2026-11-14 12:53:43 +01:00
Code Issues 87 Packages Projects Releases 11 Wiki Activity

build(deny): ignore RUSTSEC-2025-0059, servo-fontconfig is unmaintained

Browse Source 
It is reached only through font-loader, which komorebi-bar looks up system fonts with; it was
already in the lock before the recorder and schemars-nixgen merged.
This commit is contained in:
LGUG2Z committed 2026-11-05 15:03:27 -08:00
1 parent 112e624c5e
commit 5b3e3f598a
1 file changed
+1
Download Patch File Download Diff File Expand all files Collapse all files
deny.toml
+1
View File
@@ -24,6 +24,7 @@ ignore = [
{ id = "RUSTSEC-2026-0370", reason = "zvariant is maintained inside zbus from zbus 6; komorebi talks to KWin with zbus 5" },
{ id = "RUSTSEC-2026-0371", reason = "zbus_names is maintained inside zbus from zbus 6; komorebi talks to KWin with zbus 5" },
{ id = "RUSTSEC-2026-0372", reason = "zvariant_derive is maintained inside zbus from zbus 6; komorebi talks to KWin with zbus 5" },
{ id = "RUSTSEC-2025-0059", reason = "servo-fontconfig is unmaintained and has no safe upgrade; it is reached only through font-loader, which komorebi-bar looks up system fonts with" },
{ id = "RUSTSEC-2026-0183", reason = "git2 is only used by shadow-rs at build time to read version info from our own repository" },
{ id = "RUSTSEC-2026-0184", reason = "git2 is only used by shadow-rs at build time to read version info from our own repository" },
{ id = "RUSTSEC-2026-0194", reason = "quick-xml is only used to parse local, trusted XML (config conversion and plist files), not untrusted input" },