@andrewnez could I get access to the list of dead critical repos in the Cargo ecosystem (ideally in order of criticality)? Seems very relevant to my RustSec work.
D
djc@hachyderm.io
@djc@hachyderm.io
Posts
-
Weekend at Bernie's - Which of your dependencies are wearing sunglasses? -
A GitHub for maintainers - Giving dependencies the same treatment the fork got@andrewnez maybe. And arguably it’s not all that different from triggering every downstream’s CI via Dependabot/Renovate after the release.
Though now I’m wondering for Rust if it would be feasible to do like a static analysis version of this, plowing through the rustwide corpus looking for specific code paths.
-
A GitHub for maintainers - Giving dependencies the same treatment the fork got@andrewnez having something crater-like would be amazing, but it also seems very expensive, potentially prohibitively so? I do wonder if we could do the static analysis version of that at least for languages like Rust.