messense

Related toolings: - https://github.com/CycloneDX/cyclonedx-rust-cargo

Related links: - https://github.com/rust-lang/rfcs/pull/3553 - https://github.com/rust-lang/cargo/pull/13709

Pull requests are welcome!

> It might be that running `cargo metadata` inside the sdist working dir will be good enough to invite cargo to fixup the `Cargo.lock`? That might be a good sanity...

Alternatively, if the project layout is simple, consider using `sdist-generator = "git"` in `[tool.maturin]` instead so it does not try to rewrite anything.

Pull requests are welcome!