RUSTSEC-2022-0054: wee_alloc is Unmaintained

[github-actions]

wee_alloc is Unmaintained

Details
Status	unmaintained
Package	wee_alloc
Version	0.4.5
URL	rustwasm/wee_alloc#107
Date	2022-05-11

Two of the maintainers have indicated that the crate may not be maintained.

The crate has open issues including memory leaks and may not be suitable for production use.

It may be best to switch to the default Rust standard allocator on wasm32 targets.

Last release seems to have been three years ago.

Possible Alternative(s)

The below list has not been vetted in any way and may or may not contain alternatives;

• Rust standard default allocator on wasm32-target

Honorable Mention(s)

The below may serve to educate on potential future alternatives:

• lol_alloc

See advisory page for additional details.

[mpalmer]

This seems relevant to your interests, @bcheidemann. I'm inclined to just remove wee_alloc entirely and rely on the default allocator, unless you've got an alternate plan.

[bcheidemann]

@mpalmer ouch! I didn't realise it was un-maintained 😬 The wasm-pack docs make reference to it so I assumed it would be ok. It's not really needed anyway so I can raise a PR to remove it.

[corneliusroemer]

@bcheidemann could you maybe open an issue on wasm-pack to indicate that wee_alloc should be removed from the docs so that others don't fall into the same trap? You know best where you found it mentioned there!

[bcheidemann]

@corneliusroemer Thanks for reminding me :)

See rustwasm/wasm-pack#1258