Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Support deps.rs #7219

Open
Icelk opened this issue Nov 5, 2021 · 1 comment
Open

Support deps.rs #7219

Icelk opened this issue Nov 5, 2021 · 1 comment
Labels
good first issue New contributors, join in! needs-upstream-help Not actionable without help from a service provider service-badge New or updated service badge

Comments

@Icelk
Copy link

Icelk commented Nov 5, 2021

📋 Description

https://deps.rs provides a service to check dependency security status in Rust projects.
This will work for for all repos with a Cargo.toml.

"dependencies | 2 of 15 outdated" or "dependencies | insecure"

More examples can be found on https://deps.rs/.

🔗 Data

Will not require an API key.
A draft PR at deps-rs/deps.rs#122 implements this API.

🎤 Motivation

Several other package managers have dependency badges.
When the PR is merged, why not provide it to the Rust ecosystem?

https://deps.rs/ already support badges. They are however not as customizable.
Using one service (shields.io) is also more consistent.

@Icelk Icelk added the service-badge New or updated service badge label Nov 5, 2021
@calebcartwright calebcartwright added good first issue New contributors, join in! needs-upstream-help Not actionable without help from a service provider labels Nov 5, 2021
@calebcartwright
Copy link
Member

Sure, thanks for the request. We're happy to support this once the API becomes available so please drop a note here once that's complete and the work on our side can proceed.

For what it's worth we do already provide badges for other services in the Rust ecosystem including crates.io and docs.rs, the latter of which fairly recently started forwarding received badge requests directly over to our servers and were able to drop their own internal badge implementation (refs rust-lang/docs.rs#1362 and rust-lang/docs.rs#170)

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
good first issue New contributors, join in! needs-upstream-help Not actionable without help from a service provider service-badge New or updated service badge
Projects
None yet
Development

No branches or pull requests

2 participants