aboutcode-org / aboutcode-org/scancode.io
t-rust: Implement T-Rust solution
- Dominant language
- Python
- Stars
- 215
- Forks
- 203
- Avg merge
- 4d 8h
- Merged PRs (30d)
- 6
Description
Rust crates.io hosts over 160 thousand packages that have been downloaded over 90 billion times. Rust crates origin metadata and licensing documentation is declared by crate authors as part of crate metadata, but can be misleading and/or incorrect. Accurate Rust crates origin and license metadata are essential to safely automate the consumption of Rust packages in the software supply chain of safety-critical applications.
The solution to this is to lift the trust in Rust crates and this work is to fix this problem in multiple steps: Scan, review, curate and fix the metadata of the most popular crates. Release this data as open data, and work with the Rust community to provide the data as part of the crates.io API, cross-check and report code borrowing and reuse between crates.
Contributor guide
Assessment
This issue has not been assessed yet.