rustsec
Add unmaintained unsafe-libyaml & serde_yaml
pinging maintainers of crates listed as alternatives, so they can comment on the descriptions / appropriateness of these recommendations: @romnn , @bourumir-wyngs , @KmolYuan , @simonask , @Ethiraric , @g-plane , @elioseverojunior , @ clockworkengineer & @oovm
I consider libyaml-safer "complete", in the sense that it is a faithful (bug-for-bug) port, but I'm also unfortunately not able to devote enough time to actually keep it updated with hypothetical new bugfixes in libyaml (or the unmaintained machine-translated Rust version, unsafe-libyaml).
That's a very precarious state for it to be in, so I wouldn't consider it advisable to recommend it as an alternative at this stage.
If anyone wants to pick it up where I left off, I'm more than happy to provide guidance!
@simonask , there wont be any updates from archived repo unsafe-libyaml, and https://github.com/yaml/libyaml is moribund - it has many simple PRs not getting merged for years, including one of mine. I am happy to help with maintenance of your repo. maybe @romnn could also help, given he built yaml-spanned on top of it?