aboutcode-org / aboutcode-org/scancode.io

t-rust: Implement T-Rust solution

Open
#1,766 0 comments 0 reactions 0 assignees View on GitHub
Dominant language
Python
Stars
215
Forks
203
Avg merge
4d 8h
Merged PRs (30d)
6

Description

Rust crates.io hosts over 160 thousand packages that have been downloaded over 90 billion times. Rust crates origin metadata and licensing documentation is declared by crate authors as part of crate metadata, but can be misleading and/or incorrect. Accurate Rust crates origin and license metadata are essential to safely automate the consumption of Rust packages in the software supply chain of safety-critical applications.

The solution to this is to lift the trust in Rust crates and this work is to fix this problem in multiple steps: Scan, review, curate and fix the metadata of the most popular crates. Release this data as open data, and work with the Rust community to provide the data as part of the crates.io API, cross-check and report code borrowing and reuse between crates.

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.