Skip to content
OpenAdvisories
Unscored RUSTSEC-2026-0440

`astral-tokio-tar` is unmaintained

Published Nov 3, 2026 · Updated Nov 5, 2026 · Assigned by RUSTSEC

Description

Astral ended maintenance of `astral-tokio-tar` on November 3, 2026.
All versions of the crate are deprecated and unmaintained.

For strict tar encoding and decoding, Astral recommends [`tar-codec`]
as a possible replacement.

[0.7.1 release]: https://github.com/astral-sh/tokio-tar/releases/tag/v0.7.1
[`tar-codec`]: https://crates.io/crates/tar-codec

Affected packages

EcosystemPackageAffectedFixedRecord
crates.io astral-tokio-tar >= 0.0.0-0 — RUSTSEC-2026-0440

References