Hi Everyone!
I would like to share the cargo-issafe project. I announced it in reddit, but the community and the moderators are very unwelcoming. I hope here I got a more positive discussion.
The elevator pitch is that cargo-issafe is an unsafe usage scanner CLI which size is less than 500 KiB, forbidding unsafe code not just in the project, but in the dependencies as well. While Cargo Geiger has somewhat large codebase (6k SLoC) and bloated disproportionately high dependency number. I suggest that could the reason why there aren't too much activity. More than half of the PRs are version bumps and sadly contributions (e.g. my fix) have to wait several weeks for review. I tried to solve an easier subset of the "unsafe scanning" problem without involving too much code/dependency/complexity. Hoping to inspire collaboration.
In any case, please, try it out! And if you have any idea on improving on this tool, I am happy to hear it. All kind of feedback are welcomed.
1 post - 1 participant
