mozilla/cargo-vet
View on GitHub ↗ ★ 1,010 Rust
supply-chain security for Rust
8 mentions on Hacker News by 7 people: 1 story, 7 comments · first 2022-06-10 · latest 2025-05-10
20082026
-
…in from the megacorps like cargo-vet and last I checked didn't have as many/as consistent reviews. https://github.com/mozilla/cargo-vet https://github.com/crev-dev/cargo-crev
comment by elabajaba · 2025-05-10 · in Rust’s dependencies are starting to worry me -
…who trusts this person can update the dependency automatically since it has been “vetted”. [1]: https://github.com/mozilla/cargo-vet
comment by huijzer · 2025-03-20 · in The Pain That Is GitHub Actions -
…which are machine-readable files describing what source code reviews they have performed. [0] https://github.com/mozilla/cargo-vet [1] https://opensource.googleblog.com/2023/05/open-sourcing-our-...
comment by timmclean · 2023-10-08 · in Ferrocene – Rust for Critical Systems -
…developers. [1]: https://github.com/crev-dev/crev [2]: https://github.com/vouch-dev/vouch [3]: https://github.com/mozilla/cargo-vet
comment by remram · 2023-02-24 · in NPM repository flooded with 15,000 phishing packages -
…to scale trust. [1]: https://github.com/crev-dev/crev [2]: https://github.com/vouch-dev/vouch [3]: https://github.com/mozilla/cargo-vet
comment by remram · 2022-11-02 · in Dozens of malicious PyPI packages discovered targeting developers -
…version of a crate accidentally and that SHA validation is being considered as part of vet as well https://github.com/mozilla/cargo-vet/issues/116 ).
comment by rslabbert · 2022-06-13 · in Vetting the Cargo