You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
During a dependency review I noticed that tokio-rustls includes bad test
keys in the binary pem format in the published packages. These files are
not required for building tokio-rustls and make it harder to review the
code.
This commit explicitly excludes these files from the published package.
Before this change `cargo package` reported a size of 22 files, 137.1KiB (34.6KiB compressed).
After this change it reports a size of 14 files, 110.6KiB (27.3KiB compressed).
Nevertheless given the current number of 17 million downloads per month
that would result in a 118 GB/month traffic reduction for crates.io. For
me personally the exclusion of the binary files is the more important
outcome.
0 commit comments