Executive brief
The stack-graphs Rust library, used for source code graph analysis, is archived and no longer maintained by its creator. The project repository has been frozen with issues and pull requests disabled, meaning security issues or bugs cannot be reported or fixed through official channels. Organizations relying on this library face ongoing security risks without access to updates or vendor support.
Technical details
The stack-graphs Rust library repository (github/stack-graphs) has been archived with all issue and pull request functionality disabled. The last crates.io release was version 0.14.1 published on 2024-12-13, with the repository's final commit on 2025-09-09. No active successor project has been identified, leaving consumers with no upgrade path for security or maintenance fixes.
Affected products
- GitHub stack-graphs 0.14.1 and earlier
Timeline
- 2026-09-22: disclosed: Advisory published noting project is archived and unmaintained