chrono is a library that is abandoned and has unresolved security issues. As such, it is undesirable to have in the dependency closure.
Loom pulls in chrono by depending on tracing-subscriber = "0.2.22", which includes chrono. Newer versions of tracing-subscriber (0.3.x) do not include this dependency. As such, I would propose to bump this dependency to remove the zombie chrono library from the dependencies. :)
blitz
commented
2 years ago
chrono is a library that is abandoned and has unresolved security issues. As such, it is undesirable to have in the dependency closure.
Loom pulls in chrono by depending on
tracing-subscriber = "0.2.22", which includes chrono. Newer versions oftracing-subscriber(0.3.x) do not include this dependency. As such, I would propose to bump this dependency to remove the zombie chrono library from the dependencies. :)