`paste` dependency no longer maintained

[tomtom5152]

RUSTSET has just published RUSTSEC-2024-0436 detailing how paste is no longer maintained and has been archived. This is used by both the latest 0.7.7 release and the 0.8 branch.

[gbj]

This is quite a frustrating RUSTSEC advisory, which is going to have much larger repercussions.

Given that itertools, wasm-bindgen, sqlx, pyo3-ffi, and many other huge crates use this as a dependency, my assumption would be that someone else is going to end up taking over maintenance.

There are no listed alternatives and dtolnay (creator of paste) commented on the RUSTSEC issue asking them to remove the alternatives that had initially been listed, which are almost certainly all less reliable.

Anyway, just wanted to post a note to say I'd seen this, and that my plan is to wait and see where the ecosystem lands.