I made a fork of this repository and dependabot opened a PR to fix a security vulnerability by updating MessagePack from 2.6.100-alpha to 3.0.300.
For reference: Revolutionary-Games#1
I think it would make more sense for a fix for this to be made in the upstream repo rather than me doing it in my fork.