Have you tried contributing it upstream?

I didn’t yet just because I didn’t get around to it (and because I am not sure the std lib even wants this feature).

I’m not a “no unsafe” zealot, but in light of the xz issue, it would be nice.

I don’t think the two relate. I wouldn’t drop any dependency, the ringbuffer is implemented in the same repo.