Dependabot alert #7 (GHSA-rc23-xxgq-x27g) flags wee_alloc as unmaintained, with open memory leak issues and no patched version. packages/aiken-uplc/rust/src/lib.rs installs it as the global allocator, so it is compiled into the WASM that @evolution-sdk/aiken-uplc publishes.
Remove the #[global_allocator] static from lib.rs and the wee_alloc entry from rust/Cargo.toml, so the build uses the default Rust allocator for wasm32. Then run pnpm build:wasm to regenerate the committed WASM in src/bundler and src/web.
Dependabot alert #7 (GHSA-rc23-xxgq-x27g) flags
wee_allocas unmaintained, with open memory leak issues and no patched version.packages/aiken-uplc/rust/src/lib.rsinstalls it as the global allocator, so it is compiled into the WASM that@evolution-sdk/aiken-uplcpublishes.Remove the
#[global_allocator]static fromlib.rsand thewee_allocentry fromrust/Cargo.toml, so the build uses the default Rust allocator forwasm32. Then runpnpm build:wasmto regenerate the committed WASM insrc/bundlerandsrc/web.