Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

server to geiger every crate version and publish to cargo-crev #108

Closed
bestia-dev opened this issue Jun 18, 2020 · 1 comment
Closed

server to geiger every crate version and publish to cargo-crev #108

bestia-dev opened this issue Jun 18, 2020 · 1 comment

Comments

@bestia-dev
Copy link

I built a web site to show cargo-crev reviews:
example:
https://web.crev.dev/rust-reviews/crate/num-traits/
My goal is to enable developers to read reviews before they choose to include a crate in their project.
Geiger is a great tool, but it works locally on the base of cargo.toml. So the developer has already choosen the dependency.
My idea is to build a server that downloads new versions from crates.io, geiger them and writes a review with the findings. I think there should be a person to add some more knowledge about the found unsafe code. Then push it to its GitHub repository. Cargo-crev stores reviews publicly in GitHub repositories.
From there the users of cargo-crev can fetch this reviews and read them. Also web.crev.dev fetches this repo and shows it publicly on the web.
Please, take a look on the web-site https://web.crev.dev/rust-reviews/
I appreciate you opinion on this.

@anderejd
Copy link
Contributor

Love love love the idea of providing crev reviews as a website! Doing some kind of website for cargo geiger results has been something I've been hoping to find the time for myself or even better, someone else doing it instead :) Please report back in this github issue if and when you push ahead with this idea!

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

2 participants