RUSTSEC-2022-0048: xml-rs is Unmaintained

> xml-rs is Unmaintained

| Details | |
| ------------------- | ---------------------------------------------- |
| Status | unmaintained |
| Package | `xml-rs` |
| Version | `0.8.4` |
| URL | [https://github.com/netvl/xml-rs/issues](https://github.com/netvl/xml-rs/issues) |
| Date | 2022-01-26 |

xml-rs is a XML parser has open issues around parsing including integer
overflows / panics that may or may not be an issue with untrusted data.

Together with these open issues with Unmaintained status xml-rs
may or may not be suited to parse untrusted data.

## Alternatives

- [quick-xml](https://crates.io/crates/quick-xml)

See [advisory page](https://rustsec.org/advisories/RUSTSEC-2022-0048.html) for additional details.

Start by locating where the Rust project declares or uses xml-rs 0.8.4, then read the linked RustSec advisory and compare the listed quick-xml alternative. The issue does not define a concrete change; completion would require determining and addressing the project's use of the unmaintained parser.

Written by the indexing model from the issue text.