l3montree-dev / l3montree-dev/devguard
Package Inspector: crates.io lookups return no results (tokio, tracing); C++ also affected
Open
Nobody has claimed this yet.
bug
- Dominant language
- Go
- Stars
- 161
- Forks
- 43
- Avg merge
- 1d 8h
- Merged PRs (30d)
- 37
Description
An external visitor reported that the Package Inspector returns no results for certain ecosystems. Popular, clearly existing crates like tokio and tracing yield nothing, even though crates.io is listed as a supported ecosystem. C++ is reportedly affected as well.
Contributor guide
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
Research direction
Start with the Package Inspector described in the linked documentation and reproduce lookups for the tokio and tracing crates, then check an affected C++ package lookup. Trace where these ecosystem queries are handled; done means existing packages return results for both crates.io and C++.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- cpp, rust
- Domain
- security
- Issue type
- Bug
- Difficulty
- 3/5
- Estimated time
- 1-2 days
- Activity status
- Active
- Clarity
- Needs clarification
- Newbie friendliness
- 45/100