The tempdir crate has been unmaintained for years, and it's using a vulnerable version of remove_dir_all (source).
This PR replaces tempdir with tempfile, which means that cargo audit is a little happier. There's still time v0.1.45 in the tree, but that's due to chrono and there's not much we can do there aside from wait for a new release (unless we completely drop support for it).
The
tempdir
crate has been unmaintained for years, and it's using a vulnerable version ofremove_dir_all
(source).This PR replaces
tempdir
withtempfile
, which means thatcargo audit
is a little happier. There's stilltime v0.1.45
in the tree, but that's due to chrono and there's not much we can do there aside from wait for a new release (unless we completely drop support for it).