Sergey "Shnatsel" Davidoff
Sergey "Shnatsel" Davidoff
`miniz_oxide` always zeroes the output buffer for safety even when writing to a Vec: https://docs.rs/miniz_oxide/0.7.1/src/miniz_oxide/deflate/mod.rs.html#121-157 I think it's best to just zero the buffer when using `miniz_oxide` instead of revamping...
If calls to `compress_vec` and `decompress_vec` are uncommon, then I'd rather make them slightly slower through zero-initialization than remove these functions outright.
Actually no, that bug is still there, my PR didn't fix this one. So please reopen.
The fix has been merged but still hasn't shipped to crates.io. Is there anything in particular holding up a new release with the fix?
There technically is a way to recover: the HMAC key can be changed by crates.io. But that invalidates all the cookies for all users, and can only be performed by...
The database dumps are not officially in a stable format, so I could see the format changing in the future and the tool breaking. However, in practice the parts we...
CI now runs `cargo test`, closing.
[Syft](https://github.com/anchore/syft) can already perform such a conversion today.
`cargo metadata` doesn't support Resolver V2: https://github.com/rust-lang/cargo/issues/10718 So unfortunately we're stuck with potentially reporting more dependencies than what actually went into the build if *all* of the below are true:...
There's a feature request for this in `cargo dist`: https://github.com/axodotdev/cargo-dist/issues/81