Sergey "Shnatsel" Davidoff

That is a clever hack, but unfortunately it runs into the exact same problem when workspaces are involved: if you `cargo build` at the root of a workspace, it will...

I've opened https://github.com/rust-secure-code/cargo-auditable/pull/210 which should work around the limitations of `cargo metadata` by parsing the output of `cargo tree` and cross-referencing the package list against that. Please try it and...

I understand the main alternatives are https://crates.io/crates/memmap2 and https://crates.io/crates/memmapix, with memmap2 being the by far the more popular of the two.

Indeed, there is a comment form a compiler developer that this is extremely difficult for LLVM to optimize, and that putting `.copied()` early should be encouraged: https://github.com/rust-lang/rust/issues/106539#issuecomment-1374021037

In the latest release of `rustsec` I have aligned warnings to contain all the information that errors do, so this should not be too hard to fix now. I'm not...

WebP, PNG and JPEG encoders allow setting ICC profile as of `image` v0.25.6. So I'm going to go ahead and close this.

SubImages seem to be kinda broken in general: https://github.com/image-rs/image/issues/1412

This will require changing the public API, so it's not a change that will be easy to get merged. I suggest looking at issues that do not have the API...

I am not 100% certain this is the correct fix. I am not a blur expert and I may be missing something. It's probably worth researching this. Or, if you...

This StackOverflow answer seems to suggest the same thing, with the contributions being weighted by alpha naturally if the RBG values are multiplied by alpha first: https://computergraphics.stackexchange.com/a/5517