mozilla / cargo-vet

supply-chain security for Rust
Apache License 2.0
667 stars 46 forks source link

Implement Trusted Crate Suggestions #460

Closed mystor closed 1 year ago

mystor commented 1 year ago

This issue is to track the work to implement trusted crate suggestions as proposed in #458 on top of the work in #459. To do this, we will want to fetch publisher information when computing suggestions in ResolveReport::compute_suggest, and compare it against the trusted publisher list from imported peers, perhaps taking the trusted date ranges from peers into account.

mystor commented 1 year ago

This was finished in #461