With out mandatory user fields optional or signed audits I wasn't convinced how useful this was. I originally read the post viewing this as a way of sharing au

With out mandatory user fields optional or signed audits I wasn't convinced how useful this was. I originally read the post viewing this as a way of sharing audits amongst the general public, in similar fashion to how the packages themselves are distributed. However, once I RTFM[1] (well some of it at least) I realized that is not the intended use case and that I was mistaken. tl'dr * internal management of audits. * reading audits in from trusted third parties. I'm glad that someone is starting to tackle this terrifying problem. [1] https://mozilla.github.io/cargo-vet/importing-audits.html https://mozilla.github.io/cargo-vet/importing-audits.html