The chrono crate causes cargo-audit to warn about RUSTSEC-2020-0071. Chrono also causes a warning about it's stdweb dependency being unmaintained.

If someone is able to enable time 0.3.x for this crate then it would resolve these cargo-audit issues.

Note: Since sqlx::query! overrides time (de-)seriaization with chrono when chrono is enabled ( https://github.com/launchbadge/sqlx#cargo-feature-flags ) it might be better to remove both from sqlx-deps and allow the user to choose between chrono, time-0_2, or time-0_3 so that they can continue to use sqlx::query! outside of Sea Orm with the time library of their choice.

Related:

• CVE-2020-26235 advisory for time 0.1 dependency chronotope/chrono#602
• upgrade time to 0.3.x version sea-query#340
• upgrade time dependency version to 0.3 sea-query#341