"Until recently, API keys for crates.io were generated using the PostgreSQL random function, which is not a cryptographically secure random number generator"...

https://blog.rust-lang.org/2020/07/14/crates-io-security-advisory.html