I also spent a fair amount of time researching alternatives. There were not that many that were still active projects, and the one that looked most likely would have still needed SSL support (via mbedtls since OpenSSL isn't an option we ever want integrated again)