Skip to content

ssi-jwt: remove unused serde_with dependency#706

Open
burdettadam wants to merge 1 commit into
spruceid:mainfrom
ElevenID:upstream/remove-unused-serde-with
Open

ssi-jwt: remove unused serde_with dependency#706
burdettadam wants to merge 1 commit into
spruceid:mainfrom
ElevenID:upstream/remove-unused-serde-with

Conversation

@burdettadam

Copy link
Copy Markdown

The ssi-jwt crate declares serde_with 2.3.2 but does not use it in production, tests, examples, or generated code. Removing the unused declaration eliminates GHSA-7gcf-g7xr-8hxj from downstream dependency graphs without changing the public API or enabled features.\n\nValidated with cargo check -p ssi-jwt and cargo tree -p ssi-jwt.

@CLAassistant

Copy link
Copy Markdown

CLA assistant check
Thank you for your submission! We really appreciate it. Like many open source projects, we ask that you sign our Contributor License Agreement before we can accept your contribution.
You have signed the CLA already but the status is still pending? Let us recheck it.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants