EmbarkStudios/cargo-deny
View on GitHub ↗ ★ 2,484 Rust
❌ Cargo plugin for linting your dependencies 🦀
6 mentions on Hacker News by 6 people: 1 story, 5 comments · first 2019-12-26 · latest 2025-01-15
20082026
-
There is `cargo-deny` that handles some enforcement: https://github.com/EmbarkStudios/cargo-deny . Doesn't handle authors, but I suspect it's easy to add? There is really just a handful of crates that nearly often get pulled in and…
comment by 0x457 · 2025-01-15 · in Build a Database in Four Months with Rust and 647 Open-Source Dependencies -
▲ 3
Cargo-deny: a cargo plugin for linting Rust project dependenciesstory by angelmm · 2023-05-26 · 0 comments
-
…issues around dependencies, e.g.: * https://github.com/rustsec/rustsec/tree/main/cargo-audit * https://github.com/EmbarkStudios/cargo-deny "[cargo-audit] Audit Cargo.lock files for crates with security vulnerabilities reported to the…
comment by follower · 2021-12-29 · in This Year in Embedded Rust -
For licenses there's cargo-deny https://github.com/EmbarkStudios/cargo-deny On the security standpoint and a wide net of crates.. that's a problem, same as with npm/yarn/pip/whatever and I agree on that. That one bugs me as well. Difficult…
comment by Keyframe · 2021-05-15 · in Things you can’t do in Rust (and what to do instead) -
Would be nice if built in, but cargo-deny is a neat project by Embark that can do this: https://github.com/EmbarkStudios/cargo-deny
comment by jacobmischka · 2021-03-04 · in A reminder that you should double-check the licenses for software you use -
Added a verification step to prevent this in Rust code with our cargo-deny tool. https://github.com/EmbarkStudios/cargo-deny/pull/80 We run this in GitHub Actions for all of our Rust repos, primarily to prevent banned or duplicate…
comment by repi · 2019-12-26 · in NPM lockfiles can be a security blindspot for injecting malicious modules in PRs