v0.1.7
Security
- Fixed two inaccurate claims in SECURITY.md: dtolnay/rust-toolchain was pinned to the mutable stable tag, not a commit SHA as claimed, and Cargo.lock was gitignored, not committed as claimed. Both fixed for real.
- Switched vulnerability reporting to GitHub Security Advisories.
- Added a cargo audit job to CI.