update: a safe decoder has been released in v0.3.0, and it's nearly as performant as the unsafe one