News for hackers. Stuff that matters.

A comment on From xz to ibus: more questionable tarballs. Parent comment

Re:From xz to ibus: more questionable tarballs by PaoloBarbolini on Tuesday April 02, 2024 @06:12AM (#39904030)
Same for Rust. In the short term we're trying to solve it on the user's side with https://crates.io/crates/cargo-goggles, but in the long term the registry should probably do it.
[ Parent | on HN ]
Re:From xz to ibus: more questionable tarballs by pabs3 on Tuesday April 02, 2024 @08:26PM (#39912343)
Are crate maintainers going to accept having to do this? I've seen crates where the code in the crate was generated by a Python script not in the crate but only in git.
[ Parent | on HN ]