diff --git a/crates/spin/RUSTSEC-2019-0031.toml b/crates/spin/RUSTSEC-2019-0031.toml
new file mode 100644
index 0000000000..5bc52e82d3
--- /dev/null
+++ b/crates/spin/RUSTSEC-2019-0031.toml
@@ -0,0 +1,15 @@
+[advisory]
+id = "RUSTSEC-2019-0031"
+package = "spin"
+title = "spin is no longer actively maintained"
+informational = "unmaintained"
+date = "2019-11-21"
+url = "https://github.com/mvdnes/spin-rs/commit/7516c80"
+unaffected_versions = ["> 0.5.2"] # last release
+patched_versions = []
+description = """
+The author of the `spin` crate does not have time or interest to maintain it.
+
+Consider [`lock_api`](https://crates.io/crates/lock_api) (a subproject of
+`parking_lot`) as an alternative which also supports `no_std` environments.
+"""