@behdad thoughts on moving away from ttf-parser due to https://rustsec.org/advisories/RUSTSEC-2026-0192.html ?
I realize that ttf-parser is in the same repo, but it is embedded in a number of harfbuzz related crates and consequently causes a that RUSTSEC alert on a large number of crates.
Would you be willing to accept a PR and release version updates to migrate from ttf-parser to skrifa across the harfbuzz ecosystem?
@behdad thoughts on moving away from
ttf-parserdue to https://rustsec.org/advisories/RUSTSEC-2026-0192.html ?I realize that
ttf-parseris in the same repo, but it is embedded in a number ofharfbuzzrelated crates and consequently causes a that RUSTSEC alert on a large number of crates.Would you be willing to accept a PR and release version updates to migrate from
ttf-parsertoskrifaacross theharfbuzzecosystem?