search

dropbox / rust-brotli

Brotli compressor and decompressor written in rust that optionally avoids the stdlib
https://dropbox.tech/infrastructure/-broccoli--syncing-faster-by-syncing-less
BSD 3-Clause "New" or "Revised" License
818 stars 83 forks source link

Uploaded source code contains binary data #220

Open weiznich opened 1 week ago

weiznich commented 1 week ago

While looking through the changes of a recent update of the brotli crate I noticed that the source code uploaded to crates.io contains the binary test data: https://diff.rs/brotli/6.0.0/7.0.0/testdata

Given the recent xz incident that might not be desirable as it makes it harder to review what's going on inside the binary data. Additionally these data add unneeded bloat to the source code.