2 ms·
Not a Rust dev so maybe a dumb question, but is this more involved than just running diffs? If so, what needs to be done?
by jonahx 2y ago
Not a Rust dev so maybe a dumb question, but is this more involved than just running diffs? If so, what needs to be done?
- johannes1234321 2y agoThe key thing is interpretation of the diff. Is there a difference since they ran some code generator ins the crate contains generated code, not present in the repo or did they add a backdoor?
- thayne 2y agoMost of the diffs are probably innocuous. I suspect the most common diff would be the version line of Cargo.toml, both from CI that automatically updates that line, and people who forgot to update it before making a tag in git.
- mmastrac 2y agoAs someone with a crate that's in the 50MM plus range, this happens all the time. I really should automate this via a GH action.