Cryptographically verifiable, distributed dependency reviews
reviewer: programmerjake
$ cargo crev repo fetch url https://github.com/programmerjake/crev-proofs
$ cargo crev id trust dUc4luSnPuYlfYarXUizPOSBLUBZguTVOQUCHmAKSps
repo: https://github.com/programmerjake/crev-proofs
Please, use mobile in landscape.
original author
original author
original author
original author; placeholder package
dependency of softfloat-sys
quick read through
Found some unsound code, reported in #241
Going through the code, there are many places where non-public functions are not marked unsafe
even when they exhibit UB if given garbage input. Since those functions are not publically visible,
external users can't directly cause UB from safe code, but I'd consider that a code style issue. Reported in #244
There are several places where lifetimes seem to have been ignored, unnecessarily restricting users. Reported in #243
ExecutionEngine is not thread-safe, even though the underlying LLVM type is. Reported in #242
The documentation for TargetMachine::write_to_file is misleading and incorrect. Reported in #240
original author
original author
read through v0.3.0 code after contributing to master version
original author
original author; rating not strong because it only builds on Linux; none for throrughness because I didn't review all of softfloat's C code.
read through source, previously contributed code to add support for "string" VarType
© bestia.dev 2023, MIT License, Version: 2023.608.1636
Open source repository for this web app: https://github.com/bestia-dev/cargo_crev_web/
original author