From 3f2745cc4f1ca8e11acb88a8deb581a335ad6783 Mon Sep 17 00:00:00 2001 From: Georg Semmler Date: Mon, 15 Dec 2025 15:44:07 +0100 Subject: [PATCH] Exclude a script file from the published package During a dependency review we noticed that the xattr crate includes a ci script file. This file is not required for building xattr as depndency. The script file might at some point become problematic. As of now they prevent any downstream user from enabling the `[bans.build.interpreted]` option of cargo deny. I opted for using an explicit include list instead of an exclude list to prevent these files from beeing included in the published packages to make sure that everything that's included is an conscious choice. --- Cargo.toml | 1 + 1 file changed, 1 insertion(+) diff --git a/Cargo.toml b/Cargo.toml index 7db57899..cb47d743 100644 --- a/Cargo.toml +++ b/Cargo.toml @@ -9,6 +9,7 @@ documentation = "https://docs.rs/xattr" repository = "https://github.com/Stebalien/xattr" keywords = ["xattr", "filesystem", "unix"] license = "MIT OR Apache-2.0" +include = ["README.md", "LICENSE-*", "Cargo.toml", "src/**/*.rs", "tests/**/*.rs"] [features] default = ["unsupported"]