search

mozilla / cargo-vet

supply-chain security for Rust
Apache License 2.0
621 stars 43 forks source link

Perform import validation when aggregating remote audit files #586

Closed mystor closed 1 month ago

mystor commented 6 months ago

This copies the behaviour from normal imports, meaning that it handles things like version mismatches gracefully, and only emits a warning that those audits were ignored.

We may want to include an option to make this more aggressive, as aggregate is expected to be frequently run in automation so warnings may be invisible.

mystor commented 4 months ago

The clippy lint failures will be fixed in #596