Plugins like cargo audit provide helpful functionality to the project.
We cannot add them toCargo.toml’s [dev-dependencies], because that requires their dependencie’s versions to align with the versions of our other dependencies. They need to be installed with cargo install and then provided to the project somehow.
Ideally, we could integrate them into our shell.nix environment, by ways of carnix for example.
@shlevy writes:
Does upstream consider this a deficiency in the cargo spec?
@Profpatsch writes:
I don’t know.
They might just assume users will set it up globally with cargo install somehow.
@Profpatsch writes:
@shlevy writes:
@Profpatsch writes:
@Profpatsch writes: