Posts by AMDmi3@fosstodon.org
 (DIR) Post #B6f95uZ7Vx0mWHNgCO by AMDmi3@fosstodon.org
       0 likes, 0 repeats
       
       @thomask seconded, I closely watch this rfc too. For now it's a huge pain to do this manually, like with dependabot+cooldown (which doesn't update transitive depends anyway), or cargo update in a branch then merge it in a week. Still this feels like a band aid, while a real solution would be something like a distributed code audit system. IIRC cargo-vet does something like that, but I haven't tried it yet.