From ae14c909ee951c8ea67876b57d9f980b9dca0d3b Mon Sep 17 00:00:00 2001 From: Dirkjan Ochtman Date: Fri, 28 Nov 2025 09:55:50 +0100 Subject: [PATCH] Declare rustls-pemfile to be unmaintained --- crates/rustls-pemfile/RUSTSEC-0000-0000.md | 23 ++++++++++++++++++++++ 1 file changed, 23 insertions(+) create mode 100644 crates/rustls-pemfile/RUSTSEC-0000-0000.md diff --git a/crates/rustls-pemfile/RUSTSEC-0000-0000.md b/crates/rustls-pemfile/RUSTSEC-0000-0000.md new file mode 100644 index 000000000..5432ead7e --- /dev/null +++ b/crates/rustls-pemfile/RUSTSEC-0000-0000.md @@ -0,0 +1,23 @@ +```toml +[advisory] +id = "RUSTSEC-0000-0000" +package = "rustls-pemfile" +date = "2025-11-28" +url = "https://github.com/rustls/pemfile/issues/61" +informational = "unmaintained" + +[versions] +patched = [] +``` + +# rustls-pemfile is unmaintained + +The rustls-pemfile crate is no longer maintained. The repository has been archived since August +2025, and users are encouraged to depend directly on the underlying PEM parsing code included +in rustls-pki-types since 1.9.0. The latest version of rustls-pemfile is in fact a thin wrapper +around the same code used in rustls-pki-types, so migrating should be straightforward. + +The new API is represented by the [`PemObject`][PemObject] trait, which provides methods for +reading a single or multiple PEM objects from a file or byte slice. + +[PemObject]: https://docs.rs/rustls-pki-types/latest/rustls_pki_types/pem/trait.PemObject.html