pinkforest(she/her)
pinkforest(she/her)
This issue is refined from: https://github.com/rustsec/rustsec/issues/672#issuecomment-1233396502 - _Field value exclusion and / or regex pattern_ We decided to continue to follow this instead: https://doc.rust-lang.org/reference/conditional-compilation.html ## Issue Example time crate: https://github.com/rustsec/advisory-db/blob/main/crates/time/RUSTSEC-2020-0071.md...
_This is a WIP and I'll be editing this to potentially come up with something_ Currently we only have `patched = [ "semVers" ]` to denote fix without contextual information...
Date field can be backdated and the advisories appear out-of-order in https://rustsec.org/advisories/ Didn't the website have access to the repository and it could just look at the id-assigned commit date(s)...
Related: https://github.com/rustsec/rustsec/pull/666, https://github.com/rustsec/rustsec/issues/669 I think it could be helpful to have FAQ.md that is visible via website ? Sections maybe for: - General - Contributors - Ecosystem Maintainers - Ecosystem...
Following from: https://github.com/rustsec/rustsec/pull/666 Would it be feasible / possible to link / embed / etc. howto unmaintained and contributing.md etc. from there to how to get started with contributing to...
As described: https://github.com/strawlab/iana-time-zone/issues/64 This crate is now used by chrono and has become very important in the ecosystem All these blocks seem documented $ naive grep -R unsafe * ```...
Need to de-couple these and ensure they do not break between bumps... https://dev.azure.com/cargo-geiger/cargo-geiger/_build/results?buildId=819&view=logs&j=022b0a5d-2698-5f72-7610-a845972a8b4c&t=33e4d865-0676-5964-ba63-59b88208e67d&l=350 ``` error[E0609]: no field `krate` on type `&krates::Node` --> cargo-geiger\src\graph.rs:119:39 | 119 | let package = krates_node.krate.clone();...
Signed-off-by: MissM Cargo-deny action by the lovely Embark crowd can be used to note on advisories / licenses upon PR / push I've set so any advisory will not trash...
Following-up from: https://github.com/radicle-dev/radicle-cli/issues/227 I think this deserves it's own issue. I was thinking of the general problem around keeping things Up-to-Date (tm) I don't think distros / packaging management will...
## Problem Statement Modern users today expect single-step curl -type install experience and are well adjusted to curl rustup, foundryup etc. In addition it should all work: - Regardless of...