Rework the caching in crates.io metadata retrieval.

mozilla / cargo-vet

supply-chain security for Rust

Apache License 2.0

650 stars 43 forks source link

Rework the caching in crates.io metadata retrieval. #476

Closed afranchuk closed 1 year ago

afranchuk commented 1 year ago

Use index.crates.io rather than the local index.
Add a spinner when checking audit-as-crates-io (which will be where the cache is typically updated).
Rename the publisher cache to a more general crates-io-cache.

Closes #472.

afranchuk commented 1 year ago

I've added a (hidden, but maybe it need not be?) --current-time flag which is now used in integration tests to have a fixed time. I tested the behavior by setting my system time a month in the future; there were no changes to the cache file when running tests.