The bincode dependency is not maintained anymore.

[matrizaev]

RUSTSEC-2025-0141

The bincode's crates.io page suggests the following alternatives:

• wincode Bincode-compatible alternative

• postcard Similar in spirit and structure to bincode, but a bit differently flavored

• rkyv Zero copy deserialization, honestly the best option for many of the usecases that bincode was intended for, like serializing transient data for intra-program message passing.

[rubdos]

Thanks for reporting! We're currently using this only on trusted data, so there shouldn't really be an issue. But we better move away, since this is only used for a compile-time construction.

[rubdos]

#99 replaced bincode with postcard; Some Day™ this whole ser/de step should be removed though!