Skip to content

Conversation

@weiznich
Copy link

During a dependency review we noticed that the libloading crate includes various dll files used for testing. These shouldn't be there as building the crate itself doesn't require these files. As of now they prevent any downstream user from enabling the [bans.build.executable option] option of cargo deny.

I opted for using an explicit include list instead of an exclude list to prevent these files from being included in the published packages to make sure that everything that's included is an conscious choice.

During a dependency review we noticed that the libloading crate includes various dll files used for testing. These shouldn't be there as building the crate itself doesn't require these files. As of now they prevent any downstream user from enabling the `[bans.build.executable option]` option of cargo deny.

I opted for using an explicit include list instead of an exclude list to prevent these files from being included in the published packages to make sure that everything that's included is an conscious choice.
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant