RUSTSEC-2019-0031: spin is no longer actively maintained

[github-actions]

spin is no longer actively maintained

Details
Status	unmaintained
Package	spin
Version	0.5.2
URL	mvdnes/spin-rs@7516c80
Date	2019-11-21
Unaffected versions	> 0.5.2

The author of the spin crate does not have time or interest to maintain it.

Consider lock_api (a subproject of
parking_lot) as an alternative which also supports no_std environments.

See advisory page for additional details.

[kiminuo]

It's really an upstream issue: briansmith/ring#921

[drcpu-github]

Still the same issue with ring, although it may be solved when they release version 0.17 as per above thread.

Also used here and while regex is out-of-date (newest version is 1.3.9) all other packages are at their newest versions, so I guess this stays open for now:

env_logger v0.7.1
│   ├── regex v1.3.7
│   │   └── thread_local v1.0.1
│   │       └── lazy_static v1.4.0
│   │           └── spin v0.5.2

[tmpolaczyk]

Spin is actively mantained now

mvdnes/spin-rs@9d13dd7