release: 0.6

Cargo.toml

@@ -1,6 +1,6 @@
 [package]
 name = "zip"
-version = "0.5.13"
+version = "0.6.0"
 authors = ["Mathijs van de Nes <git@mathijs.vd-nes.nl>", "Marli Frost <marli@frost.red>", "Ryan Levick <ryan.levick@gmail.com>"]
 license = "MIT"
 repository = "https://github.com/zip-rs/zip.git"

README.md

@@ -5,12 +5,15 @@ zip-rs
 [![Crates.io version](https://img.shields.io/crates/v/zip.svg)](https://crates.io/crates/zip)
 [![Discord](https://badgen.net/badge/icon/discord?icon=discord&label)](https://discord.gg/rQ7H9cSsF4)
 
-[Documentation](https://docs.rs/zip/0.5.13/zip/)
+[Documentation](https://docs.rs/zip/0.6.0/zip/)
 
+> PSA: This version of the ZIP crate will not gain any new features,
+>      and will only be updated if major security issues are found.
 
 Info
 ----
 
+
 A zip library for rust which supports reading and writing of simple ZIP files.
 
 Supported compression formats:
@@ -32,14 +35,14 @@ With all default features:
 
 ```toml
 [dependencies]
-zip = "0.5"
+zip = "0.6"
 ```
 
 Without the default features:
 
 ```toml
 [dependencies]
-zip = { version = "0.5", default-features = false }
+zip = { version = "0.6", default-features = false }
 ```
 
 The features available are:

src/read.rs

@@ -500,6 +500,12 @@ impl<R: Read + io::Seek> ZipArchive<R> {
     }
 
     /// Search for a file entry by name, decrypt with given password
+    /// 
+    /// # Warning
+    /// 
+    /// The implementation of the cryptographic algorithms has not
+    /// gone through a correctness review, and you should assume it is insecure:
+    /// passwords used with this API may be compromised.
     pub fn by_name_decrypt<'a>(
         &'a mut self,
         name: &str,
@@ -528,6 +534,12 @@ impl<R: Read + io::Seek> ZipArchive<R> {
     }
 
     /// Get a contained file by index, decrypt with given password
+    /// 
+    /// # Warning
+    /// 
+    /// The implementation of the cryptographic algorithms has not
+    /// gone through a correctness review, and you should assume it is insecure:
+    /// passwords used with this API may be compromised.
     pub fn by_index_decrypt<'a>(
         &'a mut self,
         file_number: usize,