Six weeks in, how are folks handling the time/chrono RUSTSEC advisories?

77 points roguelazer

As far as I can tell, there are still no real fixes for the time/chrono issues, and lots of crates now either have added --ignore RUSTSEC-2020-0159 --ignore RUSTSEC-2020-0071 to their cargo-audit CI lines, or are just failing cargo-audit.

What are you folks doing? Ignoring the advisories? Using time 0.3 and just forgoing all local-time on unix? Switching to some new, other time libraries that don't use libc for timezone handling and thus aren't vulnerable to these issues?