Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Introduce cargo-deny in the project #139

Closed
3 tasks
Angelmmiguel opened this issue May 25, 2023 · 0 comments · Fixed by #140
Closed
3 tasks

Introduce cargo-deny in the project #139

Angelmmiguel opened this issue May 25, 2023 · 0 comments · Fixed by #140
Assignees
Labels
🚀 enhancement New feature or request
Milestone

Comments

@Angelmmiguel
Copy link
Contributor

Is your feature request related to a problem? Please describe.

cargo-deny is a cargo plugin to lint the project dependencies and ensure they follow a set of rules and requirements. The goal is to simplify the dependency management and reinforce certain rules for any project contributor.

cargo-deny supports different kind of checks:

  • Licenses
  • Bans (avoid specific crates and check duplicated ones)
  • Advisories (check for CVEs and unmaintained libraries)
  • Sources

Describe the solution you'd like

There different steps for this specific task:

  • Install cargo-deny
  • Create the initial configuration
  • Run it as part of every PR and in the main branch

Describe alternatives you've considered

I reviewed cargo-vet as some places compare them. However, for me they are complementary. This approach involves more effort, so I would consider it as a improvement for the future.

Additional context

No response

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
🚀 enhancement New feature or request
Projects
None yet
Development

Successfully merging a pull request may close this issue.

1 participant