Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Feature request: easier reviewing of newer versions #761

Open
kpreid opened this issue Aug 14, 2024 · 0 comments
Open

Feature request: easier reviewing of newer versions #761

kpreid opened this issue Aug 14, 2024 · 0 comments

Comments

@kpreid
Copy link

kpreid commented Aug 14, 2024

Right now, cargo crev is heavily oriented towards reviewing the current versions of one’s current dependencies. It would be nice if the user interface provided easy ways to review dependencies before updating or adding them; this would avoid risks of executing possibly-malicious code (via some Cargo command on the modified project) before a review of the new dependencies has been completed.

I don't have any specific ideas of how to improve the situation when doing a full review of a not-yet-added dependency (just taking the latest in the index feels a bit fragile), but cargo crev crate diff could have an option to specify a future version to compare, whereas it currently seems to always diff the locked version against the last-reviewed version.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant