Add empty crates to clean up the Cargo.lock

Also removes a now unused RUSTSEC allow in deny.

Cargo.toml

@@ -36,6 +36,9 @@ members = [
   "coordinator/tributary",
   "coordinator",
 
+  "substrate/tree-cleanup/bandersnatch_vrfs",
+  "substrate/tree-cleanup/w3f-bls",
+
   "substrate/primitives",
 
   "substrate/coins/primitives",
@@ -94,7 +97,9 @@ lazy_static = { git = "https://github.com/rust-lang-nursery/lazy-static.rs", rev
 sp-core-hashing = { git = "https://github.com/serai-dex/polkadot-sdk", branch = "experimental" }
 sp-std = { git = "https://github.com/serai-dex/polkadot-sdk", branch = "experimental" }
 
-# The external arkworks-substrate repo refers back to the paritytech
-# polkadot-sdk repo, hence patching it to point to serai-dex's
-[patch."https://github.com/paritytech/polkadot-sdk"]
-sp-crypto-ec-utils = { git = "https://github.com/serai-dex/polkadot-sdk", branch = "experimental" }
+# cargo believes the following are in-tree despite no features activating them
+# We provide empty crates to not only prove they're unused, yet also clean up
+# our Cargo.lock
+w3f-bls = { path = "substrate/tree-cleanup/w3f-bls" }
+[patch."https://github.com/w3f/ring-vrf"]
+bandersnatch_vrfs = { path = "substrate/tree-cleanup/bandersnatch_vrfs" }

deny.toml

@@ -8,7 +8,6 @@ notice = "warn"
 unmaintained = "warn"
 
 ignore = [
-  "RUSTSEC-2021-0139", # https://github.com/serai-dex/serai/228
   "RUSTSEC-2022-0061", # https://github.com/serai-dex/serai/227
 ]
 

substrate/tree-cleanup/bandersnatch_vrfs/Cargo.toml

@@ -0,0 +1,17 @@
+[package]
+name = "bandersnatch_vrfs"
+version = "0.0.3"
+description = "Empty library to remove the unused bandersnatch_vrfs from the Cargo.lock"
+license = "MIT"
+repository = "https://github.com/serai-dex/serai/tree/develop/substrate/tree-cleanup/bandersnatch_vrfs"
+authors = ["Luke Parker <[email protected]>"]
+keywords = []
+edition = "2021"
+rust-version = "1.74"
+
+[package.metadata.docs.rs]
+all-features = true
+rustdoc-args = ["--cfg", "docsrs"]
+
+[features]
+std = []

substrate/tree-cleanup/w3f-bls/Cargo.toml

@@ -0,0 +1,17 @@
+[package]
+name = "w3f-bls"
+version = "0.1.3"
+description = "Empty library to remove the unused w3f-bls from the Cargo.lock"
+license = "MIT"
+repository = "https://github.com/serai-dex/serai/tree/develop/substrate/tree-cleanup/w3f-bls"
+authors = ["Luke Parker <[email protected]>"]
+keywords = []
+edition = "2021"
+rust-version = "1.74"
+
+[package.metadata.docs.rs]
+all-features = true
+rustdoc-args = ["--cfg", "docsrs"]
+
+[features]
+std = []