There are soundness issues in the lexical crate. This warning from deny includes explanations of the soundness issues and recommendations for how to get similar functionality without the lexical crate.
From a brief look at the code, it appears that we only use the lexical crate to format floating-point numbers; however, the deny recommendation does not recommend anything for this use-case. One crate that may provide what we need is numfmt.
The crate also has some correctness issues and appears to be unmaintained.
Alternatives
For quickly parsing floating-point numbers third-party crates are no longer needed. A fast float parsing algorith by the author of lexical has been merged into libcore.
For quickly parsing integers, consider atoi and btoi crates (100% safe code). atoi_radix10 provides even faster parsing, but only with -C target-cpu=native, and at the cost of some unsafe.
For formatting integers in a #[no_std] context consider the numtoa crate.
For working with big numbers consider num-bigint and num-traits.
There are soundness issues in the
lexical
crate. This warning fromdeny
includes explanations of the soundness issues and recommendations for how to get similar functionality without thelexical
crate.From a brief look at the code, it appears that we only use the
lexical
crate to format floating-point numbers; however, thedeny
recommendation does not recommend anything for this use-case. One crate that may provide what we need is numfmt.