The current 0.26.0 release has a dependency to atty, which now has a Github security advisory. The dependency has been removed from the source tree, but it would be great to have a release of cbindgen that projects can switch to.