|0.3.1||Mar 18, 2022|
|0.2.0||May 21, 2021|
|0.1.2||Feb 24, 2021|
|0.0.2||Oct 15, 2020|
#106 in Cargo plugins
216 downloads per month
Gather author, contributor and publisher data on crates in your dependency graph.
Use cases include:
- Find people and groups worth supporting.
- Identify risks in your dependency graph.
- An analysis of all the contributors you implicitly trust by building their software. This might have both a sobering and humbling effect.
To install this tool, please run the following command:
cargo install cargo-supply-chain
Then run it with:
cargo supply-chain publishers
By default the supply chain is listed for all targets and default features only.
You can alter this behavior by passing
--target=… to list dependencies for a specific target.
You can use
--features=… to control feature selection.
Here's a list of subcommands:
Gather author, contributor and publisher data on crates in your dependency graph Usage: COMMAND [ARG]… Available options: -h, --help Prints help information -v, --version Prints version information Available commands: publishers List all crates.io publishers in the depedency graph crates List all crates in dependency graph and crates.io publishers for each json Like 'crates', but in JSON and with more fields for each publisher update Download the latest daily dump from crates.io to speed up other commands Most commands also accept flags controlling the features, targets, etc. See 'cargo supply-chain <command> --help' for more information on a specific command.
Triple licensed under any of Apache-2.0, MIT, or zlib terms.