RUSTSEC-2020-0056: stdweb is unmaintained

[github-actions]

stdweb is unmaintained

Details
Status	unmaintained
Package	stdweb
Version	0.4.20
URL	koute/stdweb#403
Date	2020-05-04

The author of the stdweb crate is unresponsive.

Maintained alternatives:

• wasm-bindgen
• js-sys
• web-sys

See advisory page for additional details.

[stringhandler]

I don't see any references to this crate using cargo tree -i stdweb

[delta1]

It's behind features but cargo tree won't show it for some reason @stringhandler

You can see it in the lockfile

tari/Cargo.lock

Line 1791 in cd88484

"stdweb",

tari/Cargo.lock

Line 4388 in cd88484

name = "stdweb"

[stringhandler]

ah thanks

[stringhandler]

Looks like it can be resolved by upgrading the rand crate. There are a number of crates that use this. It can be found with:
cargo tree -i getrandom:0.1.16

[brianp]

Although all getrandom packages have not been updated, the use of features requiring stdweb was removed in #4844 which removed stdweb from the dependency chain entirely.

This issue can be closed. Only leaving it open for visibility in standup.