Anymap isn't unmaintained anymore.

[MisileLab]

Anymap released version through chris-morgan/anymap@2e9a570

[pinkforest]

@chris-morgan is the maintainer I believe - status update should come from the maintainer some way ..

Repo activity alone doesn't matter much -

I don't see any comments re: maintenance in the Issues or any explicit publication re: maintenance status

Also the crate has not been updated for over five years - as these are what we track
https://crates.io/crates/anymap

Also was the withdrawal happen despite the above, we would use the withdrawn = "YYYY-MM-DD" field for this

[MisileLab]

@chris-morgan is the maintainer I believe - status update should come from the maintainer some way ..

Repo activity alone doesn't matter much -

I don't see any comments re: maintenance in the Issues or any explicit publication re: maintenance status

Also the crate has not been updated for over five years - as these are what we track crates.io/crates/anymap

Also was the withdrawal happen despite the above, we would use the withdrawn = "YYYY-MM-DD" field for this

crate prerelease updated

[MisileLab]

I will add withdrawn section

[pinkforest]

Thanks for pointing to the prerelease from six months ago -

We dealt with this crate 18 July: #1281 and it led to this: chris-morgan/anymap#45 where the maintainer hasn't reacted yet.

EDIT: Seems like last word from maintainer was:
"almost all issues have been resolved": chris-morgan/anymap#37 (comment) - back in January

Has the maintainer fixed the soundness issue(s) that I believe led to people wondering about it's maintenance status ?

e.g. have these soundness issue(s) ended up into the release and will these end up into the potential future 1.0 release ?

@erickt did this originally: #906

This was the original soundness issue I believe: chris-morgan/anymap#32

@elichai @hellow554 were working on this: chris-morgan/anymap#32 (comment)

I wonder if the maintainer intends to keep maintaining it or was this just one-off pre-release six months ago that hasn't eventuated to a real release .. yet perhaps ? Would like to hear from the maintainer re: intent / preferences.

Have we raised the ticket in the repo to ask about what the maintainer's preference would be re: maintenance status ?

I mean we know the maintainer is now doing something obviously but the maintainer might want us to keep this status 🤷‍♀️

if the maintainer prefers to leave it as unmaintained status then we can instead adjust the soundness advice as fixed in 1.0 release - if the fix has been published - but leave the unmaintained as-is.

If the maintainer both prefers to have unmaintained status withdrawn and the issues are fixed (and published) then we can mark the whole advisory as withdrawn ideally.

[MisileLab]

I think maintainer one-time patch, not maintained. hmm, May i close pull request?

[pinkforest]

Can we try e-mailing the maintainer ? fix would be always good

[pinkforest]

And yeah I think Closed until we hear from the maintainer. Thanks for the effort though.