search

mozilla / cargo-vet

supply-chain security for Rust
Apache License 2.0
621 stars 43 forks source link

SourceGraph is unreliable #611

Open cemoktra opened 1 month ago

cemoktra commented 1 month ago

SourceGraph is getting unreliable, e.g.: https://sourcegraph.com/crates/prost-build/-/compare/v0.12.3...v0.12.6?visible=7000

This ends in "Empty Repository" today with reason being something like "severely out of date". While the alternative local diff exists, the diff is much harder to read (no color highlighting etc).

It could be an alternative to support configuring local UI tools

afranchuk commented 3 weeks ago

I've experienced this with about 8 diffs as well. For example, https://sourcegraph.com/crates/gimli/-/compare/v0.28.1...v0.29.0. I have not had a diff succeed, and resorted to using local tools or GitHub comparisons.

jdorfman commented 3 weeks ago

Hi @afranchuk looking into it

bholley commented 2 weeks ago

Had a good chat with @beyang today. Sourcegraph is currently upgrading and streamlining the infrastructure for the sourcegraph.com instance, which should ultimately make the crate indexing more reliable but is resulting in some hiccups in the mean time. They expect it'll be resolved by the end of the month. In the mean time, folks can pass --local for crates that don't resolve on Sourcegraph.