Compiling with cargo install --git https://github.com/typst/typst --locked typst-cli results in

warning: package slab v0.4.10 in Cargo.lock is yanked in registry crates-io, consider running without --locked

See GHSA-qx2v-8332-m4fv