cargo audit oxidization

[Shnatsel]

Summary 💡

Repository: https://github.com/rustsec/rustsec

• Network transport implementation in Rust, rustls as the TLS implementation Provide a pure-Rust alternative to the blocking libcurl HTTP backend #530
• crates-index uses gitoxide Replace git2 with gitoxide frewsxcv/rust-crates-index#82

Motivation 🔦

We need to get rid of memory-unsafe code that interfaces with the network, chiefly OpenSSL.

It's ironic to have a tool for discovering CVEs in your code use OpenSSL itself, especially when rustls exists.

Implementation

• change git2 to gix and remove openssl dependency rustsec/rustsec#922

[Byron]

Is this completed? I think it might, but thought I ask before closing. Thank you.

[Shnatsel]

Yes!