Unmaintained advisory for humantime

[oherrala]

Last crates.io release 2021-01-13 and no GitHub commits since 2021-12-28.

Question about maintenance status posted 2022-08-04 with no answer from maintainer: tailhook/humantime#31

This crate has some big dependents like clap (with 20309 dependents) and env_logger (with 8090 dependents).

cyborgtime seems to be a fork of humantime.

[oherrala]

clap only uses humantime for one example program. I submitted PR to maybe fix it: clap-rs/clap#5943

[tarcieri]

This one seems tricky due to the large numbers of downstream dependencies (I see cargo is also among them). It would be very noisy to publish an advisory.

For starters, it would probably be good to open an issue on env_logger at least and see if they're willing to transition to something else.

[oherrala]

@tarcieri Agreed.

I made a simple PR to env_logger for testing it with cyborgtime: rust-cli/env_logger#351

[oherrala]

Another alternative to cyborgtime is jiff:

https://docs.rs/jiff/latest/jiff/fmt/friendly/index.html#comparison-with-the-humantime-crate

Ref. clap-rs/clap#5943 (comment)