Unverified Commit 9f82aef9 authored by Martin Weinelt's avatar Martin Weinelt
Browse files

youtube-dl: mark as vulnerable 

YouTube-dl has beeun maintained since late 2021, and given the security
issues we've seen with yt-dlp¹ it prudent to make sure nixpkgs moves
away from it.

[1] https://github.com/yt-dlp/yt-dlp/security
parent bf23b714

pkgs/tools/misc/youtube-dl/default.nix

+3 −0
Original line number Diff line number Diff line
@@ -92,5 +92,8 @@ buildPythonPackage rec { 
    maintainers = with maintainers; [ bluescreen303 fpletz ];

    platforms = with platforms; linux ++ darwin;

    mainProgram = "youtube-dl";

    knownVulnerabilities = [

      "youtube-dl is unmaintained, migrate to yt-dlp, if possible"

    ];

  };

}