First off, thanks for this crate @dapper91 ! I just got a GH dependabot alert regarding `rmp-serde`: https://github.com/advisories/GHSA-255r-3prx-mf99 Bumping it to the latest release should fix it.