The recent dependency bump on rusqlite means this crate's main development branch is no longer vulnerable to RUSTSEC-2022-0090 via older versions of rusqlite's dependency on a vulnerable version of libsqlite3-sys.
So if a new release could be uploaded to crates.io, downstream users of sqlite-cache can also benefit.