Dependency issue, untrusted = "^0.5"

Open

#263 opened on Jan 14, 2020 3 comments 0 reactions 0 assignees View on GitHub

Nobody has claimed this yet.

Assessment

Difficulty: 2/5
Estimated time: 1-3 hours
Newbie friendliness: 25/100

Issue type: Bug
Clarity: Mostly clear
Activity status: Stale
Tech stack: rust
Domain: security

Research direction

Start with the dependency declarations in Cargo.toml and reproduce the reported Cargo resolution error using the tuf versions and untrusted constraint shown in the issue. Check which dependency versions are available from crates.io; done means the reported tuf versions resolve successfully without the untrusted version-selection error.

Written by the indexing model from the issue text.

Description

I was attempting to try out rust-tuf in an application,
In my Cargo.toml under dependencies, i tried both
tuf = "0.3.0-alpha3" and tuf = "0.2.0" both with the same issue.

error: failed to select a version for the requirement `untrusted = "^0.5"`
  candidate versions found which didn't match: 0.7.0, 0.6.2
  location searched: crates.io index
required by package `tuf v0.3.0-alpha3`
    ... which is depended on by `demo_tuf v0.1.0 (/home/charles/code/rust/demo_tuf)`

any idea where i should go from here ?

Dominant language: Rust
Stars: 198
Forks: 39
Avg merge: 9h 19m
Merged PRs (30d): 2

Contributor guide

No contributing guide indexed for this repository

First steps

Read the whole issue, then the project's contributing guide.
Comment on the issue to say you are picking it up — it saves two people doing the same work.
Fork the repository and make your change on a branch.
Open a pull request that references the issue number.

Similar issues

[coverage-improver] Cover empty-artifact fallback root in build_plugin_plans Open

Difficulty 2/5 1-3 hours Newbie friendliness 75/100

TheLarkInn/aipm#2413 · Opened Sep 24, 2026
AGENTS.md points to src/settings_window.rs, src/config.rs, and src/app.rs, which were split into directories Open

documentation

Difficulty 1/5 Under an hour Newbie friendliness 90/100

alexgorbatchev/simple-ptt#15 · Opened Sep 24, 2026
bench: run.sh's skip-update message always cites bench/skips.txt Open

tooling

Difficulty 2/5 1-3 hours Newbie friendliness 75/100

svandragt/vivace#313 · Opened Sep 24, 2026
`t/vm/frames/light-call-frame-writes-dedup.t` wall-clock ratio check fails under `-j4` load Open

todo:ticket

Difficulty 2/5 1-3 hours Newbie friendliness 70/100

tokuhirom/mutsu#9299 · Opened Sep 24, 2026
fix(taiko-client-rs): prevent BeaconClient panic on zero beacon spec values Open

Difficulty 2/5 1-3 hours Newbie friendliness 75/100

taikoxyz/taiko-mono#22168 · 1 comment · Opened Sep 24, 2026

More Rust issues