Child Thread: Survey of alternative identifier designs for Cargo and Crates.io

dlight:

But now I think about it, a third-party tool (or even a first party cargo subcommand) that lists actively maintained forks of abandoned dependencies of your project might be a good replacement, at least for people that actually bother to use such a tool (there would still be churn though).

This already exists: cargo-deny/cargo-audit.