Security fence for crates

[bascule]

@DrizztVD

That’s rather useful. Now how to make this standard practice… can it be incorporated into the compiler directly and by default?

I'd love to get it merged upstream into Cargo. It grew out of a proposal for adding that sort of feature to Cargo originally:

[pre-RFC] Security advisories as part of crates.io metadata

This is a continuation of Idea: Security advisories as part of crates.io metadata. The following text is a copy-paste of https://github.com/untitaker/rfcs/blob/security-advisories/text/0000-security-advisories.md, the text on GitHub and this post will be updated as the discussion progresses. Since we’ve already had relatively much of discussion about this, please tell me if this is already ready for a pull request. Summary Crates.io should offer an API to release security advisories for crate…