From f886dc97583d28558f37eb8a1b735ac5d06ec77c Mon Sep 17 00:00:00 2001
From: Michael Daniels <mdaniels5757@gmail.com>
Date: Mon, 1 Dec 2025 18:03:24 -0500
Subject: [PATCH] break-time: mark vulnerable

Unmaintained upstream, and has the following issues in dependencies:
  * GHSA-8qv2-5vq6-g2g7
  * GHSA-2xpg-3hx4-fm9r
  * GHSA-3288-cwgw-ch86
  * GHSA-3cj3-jrrp-9rxf
  * GHSA-mp6r-fgw2-rxfx
  * GHSA-5h46-h7hh-c6x9
  * and others

(cherry picked from commit 28a435f862bd7f6fbab85ee69622d484bf070c99)
---
 pkgs/by-name/br/break-time/package.nix | 10 ++++++++++
 1 file changed, 10 insertions(+)

diff --git a/pkgs/by-name/br/break-time/package.nix b/pkgs/by-name/br/break-time/package.nix
index 141d8d0b2765..ec7851a74085 100644
--- a/pkgs/by-name/br/break-time/package.nix
+++ b/pkgs/by-name/br/break-time/package.nix
@@ -46,6 +46,16 @@ rustPlatform.buildRustPackage rec {
     description = "Break timer that forces you to take a break";
     mainProgram = "break-time";
     homepage = "https://github.com/cdepillabout/break-time";
+    knownVulnerabilities = [
+      "Unmaintained upstream, and has the following issues in dependencies:"
+      "GHSA-8qv2-5vq6-g2g7"
+      "GHSA-2xpg-3hx4-fm9r"
+      "GHSA-3288-cwgw-ch86"
+      "GHSA-3cj3-jrrp-9rxf"
+      "GHSA-mp6r-fgw2-rxfx"
+      "GHSA-5h46-h7hh-c6x9"
+      "and others"
+    ];
     license = with licenses; [ mit ];
     maintainers = with maintainers; [ cdepillabout ];
     platforms = platforms.linux;