avast / avast/cargo-depdiff

Support for changed owners

Open
#11 0 comments 0 reactions 0 assignees View on GitHub
enhancement
Dominant language
Rust
Stars
3
Forks
1
PR merge metrics
No merged PRs in 30d

Description

We currently support listing changes of authors, as stated inside the `Cargo.toml`. We would also like to be able to detect change of _owners_ ‒ the people who are allowed to publish the crate. If someone does a takeover, we should know about it, but they might not always update the authors field.

On the other hand, currently there doesn't seem to be a good API to find it out, on the client side. So the way to get the information needs to be researched.

Contributor guide

No contributing guide indexed for this repository

Research direction

Start by reviewing the existing author-change handling described in Cargo.toml and researching how a client can detect changes to the people allowed to publish a crate. Determine whether a usable API exists and document the approach needed to identify takeovers when the authors field is unchanged.

Written by the indexing model from the issue text.

Assessment

Tech stack
rust
Domain
security
Issue type
Feature
Difficulty
5/5
Estimated time
Over a week
Activity status
Stale
Clarity
Needs clarification
Newbie friendliness
25/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.