
Security News
GitHub to Block pull_request_target Workflows by Default Starting December 2
GitHub is tightening GitHub Actions security with new restrictions on privileged pull request workflows. Here's what changes and how maintainers are affected.
@csaf-rs/vers-rs
Advanced tools
A Rust library (with WASM support) for parsing, validating, and checking version range specifiers.
This library implements the version range specifier (vers) format as described in the vers-spec.
use vers_rs::schemes::semver::*;
use vers_rs::{parse, VersVersionRange};
use vers_rs::range::VersionRange;
// Parse a version range specifier with an explicit type
let range: VersVersionRange<SemVer> = "vers:npm/>=1.0.0|<2.0.0".parse().unwrap();
// Parse a version range specifier with dynamic dispatch
let dynamic_range = parse("vers:npm/>=1.0.0|<2.0.0").unwrap();
// Check if a version is within the range
assert!(range.contains("1.5.0".parse().unwrap()).unwrap());
assert!(!range.contains("2.0.0".parse().unwrap()).unwrap());
assert!(dynamic_range.contains("1.5.0".to_string()).unwrap());
assert!(!dynamic_range.contains("2.0.0".to_string()).unwrap());
Native tests run with the usual cargo test.
WASM-specific tests (using #[wasm_bindgen_test] in src/wasm.rs) only run
when targeting wasm32-unknown-unknown, and are best run with
wasm-pack, which takes care of
installing a matching wasm-bindgen CLI version automatically:
rustup target add wasm32-unknown-unknown
cargo install wasm-pack
wasm-pack test --node --features wasm
Node.js must be available on PATH for the --node runner. Use
--headless --chrome or --headless --firefox instead to run in a headless
browser.
vers:<versioning-scheme>/<version-constraint>|<version-constraint>|...Version Comparison: Implement proper version comparison for different versioning schemes:
Normalization: Improve the normalization algorithm:
Validation: Enhance validation:
Error Handling: Improve error handling:
FAQs
A library for parsing and checking version range specifiers
We found that @csaf-rs/vers-rs demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 2 open source maintainers collaborating on the project.

Security News
GitHub is tightening GitHub Actions security with new restrictions on privileged pull request workflows. Here's what changes and how maintainers are affected.

Security News
/Application Security
A practical guide to securing GitHub Actions against supply chain attacks, covering malicious pull requests, credential theft, dependency risks, and release pipelines.

Security News
Composer 2.11 adds dependency cooldowns, joining package managers that delay new releases to reduce supply chain risks while allowing urgent security updates.