Report sevenz-rust and lzma-rust as unmaintained

[FelixEngl]

Hello everyone,

The owner (dyz1990) of the two crates sevenz-rust and lzma-rust has deleted their GitHub account and the associated GitHub repositories.
There is no way to contact the author or open a GitHub issue according to the unmaintained policy, so the url field is not included in the advisory.

Regarding the "implicitly unmaintained" rationale:
The last release was 2 months ago, but as described in the previous paragraph: The author has deleted their GitHub account and therefore abandoned the crates, and neither "stale repository" nor "90 days unresponsive" can be applied.

Best regards
Felix

[sorairolake]

@FelixEngl Did you confirm that dyz1990's GitHub account was really deleted? If their account has been flagged, other users cannot access to the account and the associated repositories. So I think you should ask him about them first. According to the forked lzma-rust's log, their email address may be [email protected].

[FelixEngl]

Hi @sorairolake, no I didn't even know that this was a thing. I'll try to contact them this week when I find the time for it.

[kornelski]

I can't find information on how a suspended account looks to other users (github definitely displays an account-suspended message to the account owner).

There's no redirect to a new name. Commits are still associated with the username, but GitHub doesn't turn the username into a link.

I think regardless of whether it's deleted or suspended (without resolution for months, which may be permanent), the sole crate owner has no ability to make releases.

[sorairolake]

Since there has been no response from the author for several months, I think these crates can be considered unmaintained. sevenz-rust may be the only practical implementation of the 7z format written in Rust, and many crates depend on it. So I think it would be better if a maintained fork of these crates is available.

[hasenbanck]

Hi! I also tried to contact the original author to take over the maintenance of the original crates but couldn't reach them. Since we needed a maintained version of those crates for our project , I decided to use the last git version I could find of the original repo (0.6.0), backport the changes from 0.6.1 and then continued the development / maintenance of the crate. They can be found under the crate names "sevenz-rust2" and "lzma-rust2".