rust-secure-code/cargo-supply-chain

Issues

• Add --offline capability

  #97 opened 5 months ago by matthiasbeyer
  1

• Consider transparently downloading the DB dump instead of fetching live results by default

  #78 opened 3 years ago by Shnatsel
  3

• Create git tags for releases

  #94 opened a year ago by figsoda
  2

• Run tests on CI

  #76 opened a year ago by Shnatsel
  2

• Allow excluding dev-dependencies

  #67 opened a year ago by Nemo157
  7

• Migrate to `anyhow` crate for error handling

  #74 opened 2 years ago by Shnatsel
  0

• Long incremental build times due to JSON schema generation

  #68 opened 3 years ago by Shnatsel
  1

• Reject arguments that don't make sense for `update` subcommand

  #70 opened 3 years ago by Shnatsel
  0

• Split argument validation into a separate function

  #40 opened 3 years ago by Shnatsel
  0

• Cache "live" results from crates.io

  #48 opened 4 years ago by Shnatsel
  7

• Flag optional dependencies or publishers

  #66 opened 3 years ago by Shnatsel
  0

• Faster crates.io fetching?

  #8 opened 4 years ago by repi
  9

• `url` field missing in JSON output when using cached data

  #61 opened 3 years ago by Shnatsel
  1

• Don't panic if the current directory is not a cargo project

  #23 opened 3 years ago by jyn514
  1

• Removing help commands from README.md

  #36 opened 3 years ago by Owez
  0

• Deal with terminal control sequences in crates.io/Github usernames

  #52 opened 3 years ago by Shnatsel
  4

• Provide a way to filter out crates

  #25 opened 3 years ago by jyn514
  5

• Could not load platform certs: "The Trust Settings Record was corrupted."

  #44 opened 4 years ago by trevyn
  4

• Output is not available in json

  #49 opened 3 years ago by zebambam
  6

• Use nice progressbars for fetching data from live API

  #57 opened 3 years ago by Shnatsel
  0

• Cancelling `cargo supply-chain update` leaves it believing it is up to date

  #53 opened 3 years ago by Nemo157
  3

• Add progress indication to `update` subcommand

  #28 opened 3 years ago by Shnatsel
  6

• Output should be consistently sorted

  #54 opened 3 years ago by Nemo157
  2

• Crate fetching is slow

  #45 opened 4 years ago by Owez
  9

• Help shows commands misaligned

  #46 opened 4 years ago by Nemo157
  3

• Strict `CFLAGS` break the build

  #43 opened 4 years ago by noncombatant
  3

• Migrate to ureq 2.0

  #39 opened 4 years ago by Shnatsel
  0

• 'authors' always shows 'unknown registry'

  #19 opened 4 years ago by jyn514
  2

• Detailed help for each command

  #37 opened 4 years ago by Shnatsel
  0

• Licenses

  #33 opened 4 years ago by taladar
  3

• `update` does nothing and says it succeeded if you're offline

  #22 opened 4 years ago by jyn514
  0

• Does not complain about invalid arguments

  #30 opened 4 years ago by Shnatsel
  1

• Don't panic on network failure

  #11 opened 4 years ago by Shnatsel
  2

• Use an argument parser

  #26 opened 4 years ago by Shnatsel
  5

• Authors are duplicated if the registry differs

  #24 opened 4 years ago by jyn514
  1

• The option to use database dumps instead of crates.io API is not apparent

  #20 opened 4 years ago by jyn514
  5

• What does `cargo supply-chain update` do?

  #21 opened 4 years ago by jyn514
  4

• Newly downloaded cache is considered expired

  #15 opened 4 years ago by Shnatsel
  3

• Grab the publisher of the exact version used as dependency

  #9 opened 4 years ago by HeroicKatora
  0

• Cache of crates.io data dumps should expire

  #13 opened 4 years ago by HeroicKatora
  1

• Too many crates are included in the analysis

  #7 opened 4 years ago by Shnatsel
  1

• Provide an option to restrict analysis to a specific platform

  #4 opened 4 years ago by Shnatsel
  1

• Support invocation via `cargo supply-chain`

  #2 opened 4 years ago by Shnatsel
  1

• Provide a crates-centric view of publishers

  #3 opened 4 years ago by Shnatsel
  1

• Dependencies from other platforms are reported as "not from crates.io"

  #5 opened 4 years ago by Shnatsel
  0