toml is unmaintained per its original maintainer

[ghost]

largely used crate the maintainer recognizes but can no longer maintain

toml-rs/toml-rs#460

[rusty-snake]

Alternatives according to https://github.com/toml-lang/toml/wiki are toml_edit and taplo.

[thomcc]

They did mention they were willing to continue maintenance for security issues (emphasis mine):

In the meantime I will not be maintaining this crate other than if a security issue arises.

So I don't know that this needs concern for the advisory DB.

[epage]

toml_edit::easy is a near drop-in replacement for toml and is what cargo has switched to.

[ghost]

i actually switched to toml_edit too with the easy and serde features. seems to just work for me, but i have basic usage of it.

[tarcieri]

Perhaps toml_edit, if it were a near drop-in replacement for toml, could be given the toml crate name and become the successor implementation?

[pinkforest]

@ehuss seems to have picked this up (?) and since the security issues fix promise is there we can close this

If the maintainer says we can flag advisory then we can do so -

Perhaps re-consider merging toml_edit to toml if that is feasible but we can't do much here.

Re-open if this becomes actionable.