Tom Fay

> Ideally, clap would allow having multiple delimiters and it'd just do it for us but unsure how I feel about the API for that from clap's side. Yeah, this...

> An alternative would be to rename the field features to raw_features, make its type a String (to make the intent clear), and then provide a features(&self) -> impl Iterator...

> Hmm I would have thought the lockfile would pin that... `cargo install` doesn't use the lockfile by default, you have to specify `cargo install --locked` for that. (I recall...

In both my use cases I want to build a reqwest client that adds a specific header, so maybe I should be allowing users to specify additional headers instead, to...

https://github.com/alilleybrinker/cargo-spdx/pull/10 adds file information to binary SBOMs of Rust source files used in the build. Doesn't handle non-Rust files yet, e.g files used in build scripts. For crate SBOMs, I...

I've verified that the `cargo package --list` approach works fine at: https://github.com/tofay/cargo-spdx/commit/992cd855f47b48d8485f9c722d2ffbbd84c45478#diff-42cb6807ad74b3e201c5a7ca98b911c5fa08380e942be6e4ac5807f8377f87fcR62-R82, and successfully used in on some projects that have multiple workspace members. That builds on https://github.com/alilleybrinker/cargo-spdx/pull/9 so I'll...

#9 introduces relationships between a binary file for the SBOM and all the dependent crates #10 introduces relationships between crates and their source files

No, that knob refers to the "POST then PUT" monolithic push operation, whereas I'd like configuration to enable the single POST monolithic push.

https://github.com/tofay/gnoci/commit/5ab6d2024c9ab19617d6a91dc1be668612ace9d7 is an example. I'm creating container images with https://github.com/containers/ocidir-rs. That uses cap-std, and the writes of container images are done using a non-static lifetime. To speed up compression I...

@sstadick please take a look at https://github.com/tofay/gnoci/commit/5ab6d2024c9ab19617d6a91dc1be668612ace9d7 to understand my use case here?