[pre-RFC] Security advisories as part of crates.io metadata

[tomaka]

@untitaker

When compared to other ecosystems such as Python's, Rust's packaging toolingencourages many single-purpose crates instead of larger monoliths.

Nit: Rust's packaging tooling doesn't encourage one or the other.