Cargo project audit checks

[danrossi]

Crates is now vulnerable to supply chain attacks. I discovered this tool to run on the project and audit before running the rust tools, resolving packages and compiling.

It might be worth adding into the CI checks or build system somehow. Like there is npm audit and pip audit.

I have run cargo-vet on the project and no issue yet.

https://mozilla.github.io/cargo-vet/setup.html

[kixelated]

When I ran cargo vet it just skipped everything? I think stuff has to be manually vetted... which is not really feasible.