Vulnerable dependency: time brought in via chrono

[DarthHater]

Hi there!

The crate time before 0.2.23 has a vulnerability, more info here: https://github.com/RustSec/advisory-db/blob/main/crates/time/RUSTSEC-2020-0071.md

FYI time is brought in via chrono to this project.

I've made a comment on a chrono issue where they are discussing upgrading time: chronotope/chrono#553 (comment)

I imagine you can't do too much until chrono updates, but pointing this out seemed like a good idea!

Cheers,
Jeffry

cc @bhamail

[estk]

Waiting on chronotope/chrono#578

[msrd0]

chrono itself is also considered vulnerable: https://rustsec.org/advisories/RUSTSEC-2020-0159

[HTGAzureX1212]

The PR still seem to not be merged. Could a potential move to the time 0.3 crate instead of chrono be feasible?

[msrd0]

I've opened #241 to at least remove the time 0.1 dependency

[estk]

I would like to remove the chrono dependency, I think migrating to time is feasible now

[estk]

Closing this in favor of removing chrono for time 0.3