RUSTSEC-2021-0127: serde_cbor is unmaintained

[github-actions[bot]]

serde_cbor is unmaintained

Details
Status	unmaintained
Package	serde_cbor
Version	0.11.2
URL	https://github.com/pyfisch/cbor
Date	2021-08-15

The serde_cbor crate is unmaintained. The author has archived the github repository.

Alternatives proposed by the author:

*ciborium *minicbor

See advisory page for additional details.

[cycraig]

This is a dependency of criterion.rs, which is only used as a dev-dependency for benchmarking.

serde_cbor v0.11.2
└── criterion v0.3.5
    [dev-dependencies]
    └── identity v0.4.0 (C:\Work\iota\identity.rs\identity)
        └── examples v0.1.0 (C:\Work\iota\identity.rs\examples)

Not an issue in my opinion but we can leave this open until a new version of criterion is released.

[cycraig]

Still an issue but should be fixed with the release of criterion 0.4: https://github.com/bheisler/criterion.rs/pull/560