bitvec
bitvec copied to clipboard
wyz dependency
This crate is quite popular (congrats!) but it depends on the wyz crate, which is a rather odd collection of random bits of code. The wyz crate also has a super-outdated typemap in its "garbage" dependencies, which indirectly pulls in unmaintained and insecure traitobject dependency. As a result a vulnerable dead crate appears in Cargo.lock of thousands of crates, and this upsets vulnerability scanners.
Can you drop the wyz dependency?