fix(security): eliminate Rust and npm dependency advisories

crates/ruvector-attention-unified-wasm/Cargo.toml

@@ -37,16 +37,15 @@ console_error_panic_hook = { version = "0.1", optional = true }
 getrandom = { version = "0.2", features = ["js"] }
 
 # Allocator for smaller binary (optional)
-wee_alloc = { version = "0.4", optional = true }
 
 [dev-dependencies]
 wasm-bindgen-test = "0.3"
 
 [features]
 default = ["console_error_panic_hook"]
 console_error_panic_hook = ["dep:console_error_panic_hook"]
-# Enable wee_alloc for ~10KB smaller WASM binary
-wee_alloc = ["dep:wee_alloc"]
+# Compatibility feature retained without the unmaintained allocator.
+wee_alloc = []
 
 [profile.release]
 opt-level = "z"

crates/ruvector-attention-unified-wasm/src/lib.rs

@@ -30,11 +30,6 @@
 
 use wasm_bindgen::prelude::*;
 
-// Use wee_alloc for smaller WASM binary (~10KB reduction)
-#[cfg(feature = "wee_alloc")]
-#[global_allocator]
-static ALLOC: wee_alloc::WeeAlloc = wee_alloc::WeeAlloc::INIT;
-
 // ============================================================================
 // Module declarations
 // ============================================================================

crates/ruvector-bench/Cargo.toml

@@ -81,7 +81,7 @@ sysinfo = "0.31"
 jemalloc-ctl = { version = "0.5", optional = true }
 
 # Profiling
-pprof = { version = "0.13", features = ["flamegraph", "criterion"], optional = true }
+pprof = { version = "0.14", features = ["flamegraph", "criterion"], optional = true }
 
 # Async
 tokio = { workspace = true }

crates/ruvector-dag-wasm/Cargo.toml

@@ -15,17 +15,13 @@ serde = { version = "1.0", features = ["derive"] }
 serde_json = "1.0"
 bincode = "1.3"
 
-[dependencies.wee_alloc]
-version = "0.4"
-optional = true
-
 [dev-dependencies]
 wasm-bindgen-test = "0.3"
 
 [features]
 default = []
-# Enable wee_alloc for ~10KB smaller WASM binary
-wee_alloc = ["dep:wee_alloc"]
+# Compatibility feature retained without the unmaintained allocator.
+wee_alloc = []
 
 [profile.release]
 opt-level = "z"

crates/ruvector-dag-wasm/src/lib.rs

@@ -5,16 +5,11 @@
 //! - Inline hot paths
 //! - Minimal error handling
 //! - No string operations in critical paths
-//! - Optional wee_alloc for smaller binary
+//! - The maintained Rust allocator supplied by the wasm toolchain
 
 use serde::{Deserialize, Serialize};
 use wasm_bindgen::prelude::*;
 
-// Use wee_alloc for smaller WASM binary (~10KB reduction)
-#[cfg(feature = "wee_alloc")]
-#[global_allocator]
-static ALLOC: wee_alloc::WeeAlloc = wee_alloc::WeeAlloc::INIT;
-
 /// Minimal DAG node - 9 bytes (u32 + u8 + f32)
 #[derive(Serialize, Deserialize, Clone, Copy)]
 struct WasmNode {