From 60ed0e0c3742846703c184ae9a3a34ba3488401a Mon Sep 17 00:00:00 2001 From: Alex Gaynor Date: Fri, 26 Jul 2024 20:12:13 -0400 Subject: [PATCH] Change our policy from 90 days to 270 days for unmaintained But, in the event a vulnerability is reported, we'll consider a crate unmaintainted after a shorter 60 days --- HOWTO_UNMAINTAINED.md | 5 +++-- 1 file changed, 3 insertions(+), 2 deletions(-) diff --git a/HOWTO_UNMAINTAINED.md b/HOWTO_UNMAINTAINED.md index a9b4e80fb..b696e1ca2 100644 --- a/HOWTO_UNMAINTAINED.md +++ b/HOWTO_UNMAINTAINED.md @@ -57,8 +57,9 @@ unreachable, the following criteria must be met: - Contact attempts with the author made with no response. Ideally these attempts are made via a public GitHub issue, so that issue can be cited in an unmaintained crate advisory if need be. Unresponsiveness - by the author over a period of 90 days is suggested before filing an - advisory. + by the author over a period of 270 days (or 60 days of + unresponsiveness after being notified of a vulnerability) is the + minimum before a crate will be considered unmaintained. ### Process