bumpalo and tracing are yanked in Cargo.lock

[DuckDuckWhale]

$ cargo install --locked cargo-about
...
warning: package `bumpalo v3.12.1` in Cargo.lock is yanked in registry `crates-io`, consider running without --locked
warning: package `tracing v0.1.38` in Cargo.lock is yanked in registry `crates-io`, consider running without --locked
...

[DuckDuckWhale]

Furthermore, two unsoundness issues has been reported by cargo audit:

Crate:     atty
Version:   0.2.14
Warning:   unsound
Title:     Potential unaligned read
Date:      2021-07-04
ID:        RUSTSEC-2021-0145
URL:       https://rustsec.org/advisories/RUSTSEC-2021-0145
Dependency tree:
atty 0.2.14
└── cargo-about 0.5.6

Crate:     rmp-serde
Version:   0.14.4
Warning:   unsound
Title:     `rmp-serde` `Raw` and `RawRef` unsound
Date:      2022-04-13
ID:        RUSTSEC-2022-0092
URL:       https://rustsec.org/advisories/RUSTSEC-2022-0092
Dependency tree:
rmp-serde 0.14.4
└── askalono 0.4.6
    └── cargo-about 0.5.6

[Jake-Shadle]

The --locked is so that latest compatible versions don't get pulled in, potentially breaking compilation, you can try just not adding it and it will use latest versions of all crates and probably be fine.

The audit reports are meaningless for this crate's usage.