[galangalalgol]

And tools like cargo audit or cargo deny can check your build tree for CVE, and suggest what to update.