Skip to content

Commit 5a03572

Browse files
authored
Exclude CI scripts from published package (#384)
During a dependency review we noticed that the tempfile crate includes a CI script. Such CI scripts shouldn't be there as they might, at some point become problematic. As of now they prevent any downstream user from enabling the `[bans.build.interpreted]` option of cargo deny. I opted for using an explicit include list instead of an exclude list to prevent these files from beeing included in the published packages to make sure that everything that's included is an conscious choice.
1 parent da894f1 commit 5a03572

File tree

1 file changed

+2
-0
lines changed

1 file changed

+2
-0
lines changed

Cargo.toml

Lines changed: 2 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -16,6 +16,8 @@ license = "MIT OR Apache-2.0"
1616
repository = "https://github.com/Stebalien/tempfile"
1717
description = "A library for managing temporary files and directories."
1818

19+
include = ["CHANGELOG.md", "Cargo.toml", "LICENSE-*", "README.md", "src/**/*.rs", "tests/**/*.rs"]
20+
1921
[dependencies]
2022
fastrand = "2.1.1"
2123
# Not available in stdlib until 1.70, but we support 1.63 to support Debian stable.

0 commit comments

Comments
 (0)