The maintainer seems unreachable.
Many issues and pull requests have been submitted over the years without any response.
Consider switching to the actively maintained yaml-rust2 fork of the original project:
yaml-rust2
{ "license": "CC0-1.0" }
{ "affects": { "arch": [], "os": [], "functions": [] }, "affected_functions": null }
[]
null
"unmaintained"
"https://github.com/rustsec/advisory-db/blob/osv/crates/RUSTSEC-2024-0320.json"