You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
During a dependency review I noticed that tokio-rustls includes bad test
keys in the binary pem format in the published packages. These files are
not required for building tokio-rustls and make it harder to review the
code.
This commit explicitly excludes these files from the published package.
Before this change `cargo package` reported a size of 22 files, 137.1KiB (34.6KiB compressed).
After this change it reports a size of 18 files, 132.6KiB (32.3KiB
compressed), so this is only a rather minimal size reduction.
Nevertheless given the current number of 17 million downloads per month
that would result in a 38 GB/month traffic reduction for crates.io. For
me personally the exclusion of the binary files is the more important
outcome.
This commit removes bad test keys fr
0 commit comments