There is no progress upstream although there recently was a not too productive discussion about one of the issues on GitHub. Given the range of issues we should either drop the package from Factory, or, as a workaround, we could try to wrap croc in a namespace jail that restricts it to a specific download directory. This would address at least most of the issues.