Warnings

RUSTSEC-2025-0141

Bincode is unmaintained

Due to a doxxing and harassment incident, the bincode team has taken the decision to cease development permanently.

The team considers version 1.3.3 a complete version of bincode that is not in need of any updates.

Alternatives to consider

• wincode
• postcard
• bitcode
• rkyv

RUSTSEC-2024-0436

paste - no longer maintained

The creator of the crate paste has stated in the README.md
that this project is not longer maintained as well as archived the repository

Possible Alternative(s)

• pastey: a fork of paste and is aimed to be a drop-in replacement with additional features for paste crate
• with_builtin_macros: crate providing a superset of paste's functionality including general macro_rules! eager expansions and concat!/concat_idents! macros

RUSTSEC-2024-0370

proc-macro-error is unmaintained

proc-macro-error's maintainer seems to be unreachable, with no commits for 2 years, no releases pushed for 4 years, and no activity on the GitLab repo or response to email.

proc-macro-error also depends on syn 1.x, which may be bringing duplicate dependencies into dependant build trees.

Possible Alternative(s)

• manyhow
• proc-macro-error2
• proc-macro2-diagnostics

RUSTSEC-2025-0134

rustls-pemfile is unmaintained

The rustls-pemfile crate is no longer maintained. The repository has been archived since August
2025, and users are encouraged to depend directly on the underlying PEM parsing code included
in rustls-pki-types since 1.9.0. The latest version of rustls-pemfile is in fact a thin wrapper
around the same code used in rustls-pki-types, so migrating should be straightforward.

The new API is represented by the PemObject trait, which provides methods for
reading a single or multiple PEM objects from a file or byte slice.