Closed
Description
I have been getting component governance alerts for Grass due to its nested dependency on atty, which has been unmaintained for a few years now and has some compatibility issues with Windows. Your nested dependency on atty comes from clap, though they've moved away from atty as of last year (see clap-rs/clap#4249).
Here's a link to the advisory in the GitHub Security Advisory Database: GHSA-g98v-hv3f-hcfr