Commit graph

182 commits

Author SHA1 Message Date
Dominik Nakamura
3f273f07a9
Provide an endpoint to create shields.io badges 2021-10-18 00:02:41 +09:00
Eduardo Pinho
6cd7256ee8
Only query advisory database on latest matching version (#98)
* Add methods to check always insecure dependencies

Unlike checks for `_insecure`,
   `always_insecure_ only accounts for
   vulnerabilities not patched in the latest version in the range

* Update status renders to show "maybe insecure"

- show always insecure dependencies as insecure,
  and remaining ones as "possibly insecure"
- show warning sign on all dependencies with possible vulnerability
- tweak security banner in case
  all insecure dependencies are "possibly insecure"

* Update badge renderer to show "maybe insecure"

- only show the red "inscure"
  if >=1 dependency is always insecure
- show "possibly insecure" if all are up to date but might be vulnerable

* Update status renderer

- more complete counts per project

* Format code

* Extend banner to explain what "maybe insecure" means
2021-09-05 09:51:10 +02:00
Tassilo Horn
50d81a7a79
Mention SourceHut support in README.md (#120)
This is an addendum to the now-merged PR #117 which actually implemented the
support.
2021-09-02 10:35:56 +01:00
Tassilo Horn
c99b0df891
Add support for projects hosted on sourcehut (sr.ht) (#117) 2021-08-31 20:38:38 +01:00
Eduardo Pinho
5b3fa9b0b2
Update dependencies crates-index and rustsec (#118) 2021-08-22 22:13:01 +01:00
Eduardo Pinho
b9445f4764
Clippy fix (#119) 2021-08-22 09:50:38 +02:00
Paolo Barbolini
40a90c3869
Bump semver (#113) 2021-06-15 13:58:26 +01:00
Paolo Barbolini
a1ca0680c8
Update dependencies (#111) 2021-05-27 16:02:02 +02:00
Sosthene-Guedon
1e1ac2ad0a
Filter yanked advisories (#108) (#109) 2021-05-10 06:15:04 +01:00
Paolo Barbolini
468a86c92e
clippy: fix clippy::from_over_into warning (#107) 2021-03-26 10:17:39 +01:00
a6b43e4e6d
feat: add 404 page (#104)
* feat: add 404 page

* feat: cache 404 results for 5 minutes
2021-02-23 16:22:00 +01:00
Paolo Barbolini
3f74371333
Upgrade bulma to 0.9.2 and reduce imported styles (#102)
* Upgrade bulma to 0.7.5

* Upgrade bulma to 0.8.2

* Upgrade bulma to 0.9.2

* Reduce features

* Remove ';' from sass
2021-02-15 08:50:28 +01:00
Paolo Barbolini
c0de9d15b6
Update cargo dependencies (#103) 2021-02-14 16:40:37 +01:00
Paolo Barbolini
c5443aaa92
Use font-awesome-as-a-crate instead of importing the entire Font Awesome library (#101) 2021-02-10 16:45:14 +01:00
Paolo Barbolini
b0243d5dac
Setup cache busting for style.css (#100) 2021-02-10 12:49:35 +01:00
Rob Ede
461dfe2fbd
trim path trailing slashes before route match (#99) 2021-02-02 10:25:29 +00:00
7ebffe019f
Display rustsec information on page (#96)
* chore: Bump rustsec version

* feat: display RustSec CVEs at the bottom

This closes #75.

* fix: Reduce complexity and remove duplicate advisories
2021-02-01 19:46:26 +01:00
Paolo Barbolini
3e77c30ada
Update to tokio 1.0 (#91) 2021-01-06 12:24:06 +01:00
Rob Ede
1fc1f24480
bump all dependencies except tokio (#87)
* bump all dependencies except tokio

* bump lib deps
2020-12-26 15:30:17 +01:00
Rob Ede
139741362e
links direct to other deps.rs pages (#86)
and a crates link is provided on the icon to the left
2020-12-13 13:28:22 +00:00
Paolo Barbolini
3427054f9b
Fix dev dependencies being counted as main dependencies (#88) 2020-12-13 09:50:14 +01:00
Arnaud Rebts
7719c9c3b6 Deploy to production instead of stg 2020-12-12 14:27:33 +01:00
Paolo Barbolini
ba2c55d4a2
Update popular repositories blocklist (#85)
* Updates the xi-editor repository url
* Adds https://github.com/996icu/996.ICU
* Updates rustlings repository url

These repositories shouldn't belong to the homepage, since they aren't really
crates and deps.rs fails to analyze them.

This gives space to:

* https://github.com/starship/starship
* https://github.com/SergioBenitez/Rocket
2020-12-06 20:42:44 +00:00
MGlolenstine
4b227a7836
Updated README.md (#81)
Changed the url, as `https://deps.rs/crates/<name>` resolves to 404.
2020-11-26 15:28:55 +01:00
Arnaud Rebts
fc89990771
CD: deploy to kubernetes (#79)
* Adds kubernetes manfiests, and deploy push

* Add production overlay

* Add a volume for crates.io-index
2020-11-15 16:36:21 +01:00
Paolo Barbolini
84a7d5154b
Clone crates.io-index instead of querying it through GitHub's API (#69)
* Clone crates.io-index instead of querying it through GitHub's API

* Implement refreshing the crates.io-index

* Run the initial index clone before starting the server

* Log cloning the crates.io-index

* Disambiguate name of ManagedIndex initial clone fn

* Log errors with cloning or refreshing the index
2020-11-14 18:29:49 +01:00
Arnaud Rebts
b18c621779 Don't run as root 2020-11-14 16:33:01 +01:00
Arnaud Rebts
ec2740bbab Install ca-certificates for HTTPS requests 2020-11-14 16:32:25 +01:00
Paolo Barbolini
33afafc879
Upgrade to maud 0.22.1 and switch to stable Rust (#74) 2020-11-04 14:42:42 +01:00
Henil
0764c00422
Show number of outdated dependencies even if insecure crates are present (#73)
* Update to show number of outdated dependencies even if insecure crates are present

* add match statement to simplify if-else statment
2020-10-26 18:40:45 +01:00
0a22c413b3
Remove dev-dependencies from badge (#70)
* Remove dev-dependencies from badge
* Document behavior of functions on AnalyzedDependencies
2020-10-26 15:49:40 +01:00
a717c9afcc
Update the project readme (#72) 2020-10-25 03:38:49 +00:00
Cecile Tonglet
f184566d1a
Setup CD: Docker image and action to push to GH container registry (#61) 2020-10-23 19:13:25 +02:00
Paolo Barbolini
8b58821beb
Remove Mutex around Cache and move away from deprecated lru-cache (#65) 2020-10-05 12:47:24 +01:00
Cecile Tonglet
dcd2e7a421
New logo (#64) 2020-10-04 21:28:01 +02:00
Rob Ede
aa0f4777e2
improve logging (#62) 2020-10-04 16:03:52 +01:00
Jamie Brynes
fd3fbbc2f6
Initial GitHub Actions CI configuration (#49) 2020-10-04 16:12:56 +02:00
Paolo Barbolini
12bb5c609d
Downgrade semver crate to 0.10 (#60)
Co-authored-by: Rob Ede <robjtede@icloud.com>
2020-10-03 13:43:48 +01:00
Rob Ede
1b66eddb06
reqwest client + caching (#58) 2020-10-03 13:08:16 +01:00
Paolo Barbolini
b3fcdabeba
Add support for 2018 edition crate renaming (#59) 2020-10-02 23:09:32 +01:00
Rob Ede
66fd685062
fix clippy lints (#56) 2020-10-02 08:37:27 +02:00
Paolo Barbolini
871e9acd74
Fix url generation to git hosted Cargo.toml file (#57) 2020-10-01 21:49:11 +01:00
Rob Ede
0fa8e46425
Merge pull request #53 from deps-rs/fut03 2020-10-01 15:40:56 +01:00
Rob Ede
45f114b3f6
remove unecessary into_iter/collect
Co-authored-by: Eduardo Pinho <enet4mikeenet@gmail.com>
2020-10-01 15:30:19 +01:00
Rob Ede
4642560868
remove debugging print 2020-10-01 11:24:51 +01:00
Rob Ede
b7b25b7cb7
update hyper and futures ecosystem 2020-09-30 23:08:40 +01:00
Eduardo Pinho
d54d4f6a2c
Merge pull request #52 from Enet4/bug/user-agent-everywhere
Add User-Agent to all requests
2020-09-30 08:45:31 +01:00
Paolo Barbolini
d8f9a38296
Merge pull request #51 from paolobarbolini/hyper012
Upgrade to hyper 0.12
2020-09-30 01:41:17 +02:00
Eduardo Pinho
7d4c8dd74d Add User-Agent to all requests from the server
- Required by crates.io, which will otherwise forbid the request
- Do the same thing for all other HTTP requests,
  for consistency and transparency
2020-09-29 23:43:03 +01:00
Paolo Barbolini
c6b3fb46e8 Upgrade to hyper 0.12 2020-09-29 23:04:13 +02:00