search

rust-secure-code / cargo-supply-chain

Gather author, contributor and publisher data on crates in your dependency graph.
Apache License 2.0
315 stars 18 forks source link

Too many crates are included in the analysis #7

Closed Shnatsel closed 3 years ago

Shnatsel commented 3 years ago

For example, when run on itself the base-x crate is included in the analysis despite not showing up in cargo tree output. It is probably either a dev-dependency or a feature-gated dependency of something.

Shnatsel commented 3 years ago

Nope, apparently it was correct all along. The confusion arose from the crate only being used for wasm builds, which is why it didn't show up in cargo tree.