[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Bug#1052431: RFP: rust-tonic -- rust implementation of gRPC



Quoting Reinhard Tartler (2023-10-03 14:06:11)
> I believe all dependencies are now in sid:
> 
> - https://tracker.debian.org/pkg/rust-prettyplease
> - https://tracker.debian.org/pkg/rust-hyper-timeout
> 
> anything else that is missing?

axum really needs tower-http (bug#1053599) - I tried patching around it,
but the rabbit hole goes deeper than I am willing to dig.

Other axum dependencies I've patched around, but at least some of them
seem to weaken security, so I really recommend to keep the dependencies
covered and up-to-date (Rust team generally seem reluctant to maintain
packages, and I have made part of standard routine to file bugreports
whenever I notice a crate lagging behind).  Rust team should already be
working on cookie and maybe also serde_html_form, but I don't think
anyone is working on either tower-http or tokio-tungstenite:
https://salsa.debian.org/debian/rust-axum/-/tree/debian/latest/debian/patches

 - Jonas

-- 
 * Jonas Smedegaard - idealist & Internet-arkitekt
 * Tlf.: +45 40843136  Website: http://dr.jones.dk/
 * Sponsorship: https://ko-fi.com/drjones

 [x] quote me freely  [ ] ask before reusing  [ ] keep private

Attachment: signature.asc
Description: signature


Reply to: