Skip to content

issues Search Results · repo:DavisPL/cargo-sherlock language:Python

Filter by

11 results
 (76 ms)

11 results

inDavisPL/cargo-sherlock (press backspace or delete to remove)

DavisPL/cargo-sherlock
tell about patched versions

if a user runs a vulnerable version for trust and there exists a patched version with a better label perhaps, provide the user with that information as well. As an example protobuf 3.7.1 - is vulnerable ...
  • muhammad-hassnain
  • Opened 
    2 days ago
  • #13

DavisPL/cargo-sherlock
inconsistent weights

weight function for stars and forks generates inconsistent weights. unicode-ident-1.0.13 stable_deref_trait-1.2.0 write16-1.0.0 idna_adapter-1.2.0 are some known cases.
  • muhammad-hassnain
  • Opened 
    on Nov 6, 2024
  • #11

DavisPL/cargo-sherlock
Add cargo tree output

I think it would be helpful to have access to the full dependency graph of any crate as part of the logging functionality of cargo sherlock. cargo tree displays the full dependency graph of a package given ...
enhancement
  • abasu2
  • 1
  • Opened 
    on Oct 3, 2024
  • #9

DavisPL/cargo-sherlock
Crash when using the -a flag

The -a flag seems to not be working properly. Here s a traceback trying to use the -a flag on crate abomonation v0.7.3: Solving for required Assumptions to trust abomonation-0.7.3... Traceback (most recent ...
bug
  • abasu2
  • 1
  • Opened 
    on Oct 2, 2024
  • #8

DavisPL/cargo-sherlock
Crash in retrieving crate data

The code seems to crash when trying to fetch the number of stars and forks for crate bigint v4.4.3 and some others. Here s my traceback: Traceback (most recent call last): File /home/abasu/reu/cargo-sherlock/solver.py ...
bug
  • abasu2
  • 2
  • Opened 
    on Oct 2, 2024
  • #7

DavisPL/cargo-sherlock
Optimizations on `-a`

- Cache the results of each analysis on a crate so that we don t rerun assumptions on the same crate - Use the new algorithm/optimization discussed on Wed where we subtract something something from ...
enhancement
  • cdstanford
  • 2
  • Opened 
    on Sep 6, 2024
  • #6

DavisPL/cargo-sherlock
Observed errors

On injex 0.1.0: - 404 error (at the very beginning) - An error occurred: 2 columns passed, passed data had 8 columns
  • cdstanford
  • 1
  • Opened 
    on Sep 6, 2024
  • #5

DavisPL/cargo-sherlock
Known crashes

- Crash on rand: $ python3 detective.py -a rand 0.8.5 Solving for required Assumptions to trust rand-0.8.5... This crate has not been audited by any organization. Traceback (most recent call last): ...
  • cdstanford
  • 3
  • Opened 
    on Sep 6, 2024
  • #4

DavisPL/cargo-sherlock
Optional usability improvements

Things that would be nice to have (later): - [x] make the version argument optional (run most recent by default) - [x] make the token.txt optional (and modify the error message to say that it is ...
enhancement
wontfix
  • cdstanford
  • 2
  • Opened 
    on Sep 6, 2024
  • #3

DavisPL/cargo-sherlock
additions to README

add to Makefile: - [x] the following 3 commands: git submodule init git submodule update rustup update add to README: - [x] interleave/update instructions and commands. RECAP: (1) clone this repository, ...
  • cdstanford
  • 1
  • Opened 
    on Sep 6, 2024
  • #2
Issue origami icon

Learn how you can use GitHub Issues to plan and track your work.

Save views for sprints, backlogs, teams, or releases. Rank, sort, and filter issues to suit the occasion. The possibilities are endless.Learn more about GitHub Issues
ProTip! 
Restrict your search to the title by using the in:title qualifier.
Issue origami icon

Learn how you can use GitHub Issues to plan and track your work.

Save views for sprints, backlogs, teams, or releases. Rank, sort, and filter issues to suit the occasion. The possibilities are endless.Learn more about GitHub Issues
ProTip! 
Restrict your search to the title by using the in:title qualifier.
Issue search results · GitHub