1.0.228 is a re-export facade over serde_core, exposing Serialize, Deserialize, and related traits. The build.rs probes rustc version and writes one generated file to OUT_DIR. Two unsafe blocks both call str::from_utf8_unchecked on buffers proven to contain only valid UTF-8; both are documented and sound. No findings.