RUSTSEC-2024-0320: yaml-rust is unmaintained.

> yaml-rust is unmaintained.

| Details | |
| ------------------- | ---------------------------------------------- |
| Status | unmaintained |
| Package | `yaml-rust` |
| Version | `0.4.5` |
| URL | [https://github.com/rustsec/advisory-db/issues/1921](https://github.com/rustsec/advisory-db/issues/1921) |
| Date | 2024-03-20 |

The maintainer seems [unreachable](https://github.com/chyh1990/yaml-rust/issues/197).

Many issues and pull requests have been submitted over the years
without any [response](https://github.com/chyh1990/yaml-rust/issues/160).

## Alternatives

Consider switching to the actively maintained `yaml-rust2` fork of the original project:

- [yaml-rust2](https://github.com/Ethiraric/yaml-rust2)
- [yaml-rust2 @ crates.io](https://crates.io/crates/yaml-rust2)

See [advisory page](https://rustsec.org/advisories/RUSTSEC-2024-0320.html) for additional details.

Start with the RUSTSEC-2024-0320 advisory and the repository's dependency declarations, which are not named in the issue. Check where yaml-rust 0.4.5 is used and assess the suggested yaml-rust2 replacement. Done means the unmaintained package is no longer required and the project's relevant checks pass.

Written by the indexing model from the issue text.