num-primes crate is unmaintained

[xtqqczze]

The num-primes crate appears to be unmaintained.

In addition, it contains a critical correctness issue where certain prime numbers are incorrectly identified as non-prime. This makes the crate unsafe to rely on for applications requiring accurate primality testing.

Relevant issue: AtropineTears/num-primes#1

cc: @AtropineTears (crate maintainer)

[djc]

3.1k recent downloads, a few more active dependents.

It's not obvious to me that the mentioned issue rises to the level of being a security problem on its own. I reached out to the maintainer in the issue (no email address found in their profile or commits).

[xtqqczze]

Thanks for taking a look and reaching out to the maintainer.

I agree the correctness issue likely doesn’t meet the bar for a security vulnerability; I mentioned it mainly for context. Since it’s a dev-dependency of num-prime, with ~380K downloads per month, it seemed worth noting.

[djc]

IMO dev-dependencies aren't as interesting for these purposes -- those 380k downloads per month aren't pulling in num-primes, only num-prime contributors might be.