rust-secure-code / cargo-supply-chain

Gather author, contributor and publisher data on crates in your dependency graph.
Apache License 2.0
313 stars 18 forks source link

Flag optional dependencies or publishers #66

Open Shnatsel opened 3 years ago

Shnatsel commented 3 years ago

It would be nice to provide actionable insights in publishers subcommand - i.e. whether you can remove a certain publisher by disabling certain features on crates the dependency tree; and if so, what features would that be.

I imagine the same could apply to crates in the crates subcommand.