RUSTSEC-2023-0028: buf_redux is Unmaintained

[github-actions]

buf_redux is Unmaintained

Details
Status	unmaintained
Package	buf_redux
Version	0.8.4
URL	https://github.com/abonander/buf_redux/issues
Date	2023-01-24

Last release was over three years ago.

The maintainer(s) have been unreachable to respond to any issues that may or may not include security issues.

The repository is now archived and there is no security policy in place to contact the maintainer(s) otherwise.

The safety-undocumented unsafe in the crate may or may not be safe to use.

The crate also has a current future incompatibility warning buf_redux/23.

Possible Alternatives

The below may or may not provide alternative(s)

• Rust alloc / std vec::Vec, collections::VecDeque
• buffer-redux - fork
• bytes
• crates.io search for 'buffer'

See advisory page for additional details.

[kate-goldenring]

This is brought in from warp which we using in the akri-shared crate

[josephknierman]

check to makes sure other unmaintained packages are removed as well

[kate-goldenring]

We should bump warp version when they release a new version since they removed use of buf_redux by removing their multipart dependency: seanmonstar/warp#1023