Nobody knows what "dwf" is, and the data isn't presently consumed or
surfaced by the `rustsec` crate, so we (hopefully) can rename it without
breaking anything.
`RUSTSEC-2018-0002` was previously assigned to `tar`, but never added to
`Advisories.toml`.
The merge workflow for this could definitely use some
improvements/automation.
