Add "cargo audit"

[trevordmiller]

Describe the problem you are trying to solve I read about cargo audit on the Rust blog, but it isn't in cargo --list.

Describe the solution you'd like Add cargo audit to cargo --list.

Notes Can cargo audit be installed with rustup like cargo fmt and cargo clippy etc.? I love cargo and feel having everything encapsulated / documented in the CLI tool would be helpful.

[sfackler]

Can cargo audit be installed with rustup like cargo fmt and cargo clippy etc.?

cargo install cargo-audit.

[trevordmiller]

@sfackler I mean would it make sense to include it with the rustup setup? I didn't manually install the fmt or clippy subcommands. Apologies if I'm misunderstanding something. I'm new to working in Rust :)

[eutampieri]

cargo install cargo-audit is not precompiled

[epage]

@trevordmiller is there a reason you closed this?

For now, I'm re-opening until there is more information as this seems like it'd be useful for us to consider and track.

[trevordmiller]

@epage I'm trying to clean up my open issues into those that are actionable for me. I also no longer use Rust. Feel free to create a separate issue. Thank you.

[epage]

Whether the issue is actionable for you or not, this is a valid issue against this project and it'd be better for us to not split its history across issues.

[epage]

Some considerations we should keep in mind when evaluating how to integrate security reporting into cargo: https://overreacted.io/npm-audit-broken-by-design/