Skip to content

Commit e2edafe

Browse files
committed
Exclude development script
During a dependency review we noticed that the similar rustls-native-cert includes a development script. This development scripts shouldn't be there as they might, at some point become problematic. As of now they prevent any downstream user from enabling the `[bans.build.interpreted]` option of cargo deny. I opted for using an explicit include list instead of an exclude list to prevent these files from beeing included in the published packages to make sure that everything that's included is an conscious choice.
1 parent c156cb7 commit e2edafe

File tree

1 file changed

+1
-0
lines changed

1 file changed

+1
-0
lines changed

Cargo.toml

Lines changed: 1 addition & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -9,6 +9,7 @@ description = "rustls-native-certs allows rustls to use the platform native cert
99
homepage = "https://github.com/rustls/rustls-native-certs"
1010
repository = "https://github.com/rustls/rustls-native-certs"
1111
categories = ["network-programming", "cryptography"]
12+
include = ["Cargo.toml", "LICENSE", "LISENCE-APACHE", "LICENSE-MIT", "LICENSE-ISC", "README.md", "src/**/*.rs"]
1213

1314
[dependencies]
1415
pki-types = { package = "rustls-pki-types", version = "1.10", features = ["std"] }

0 commit comments

Comments
 (0)