Threats affecting pkg:cargo/rand_os

The `rand_os` crate is deprecated and no longer actively maintained, as `OsRng` is now part of `rand_core`. If you are using this crate, consider upgrading to `rand_core` 0.5.1 or higher.