server/index-rows/Cargo.toml
[package]
name = "holger-index-rows"
version = "4.0.0"
edition = "2021"
authors = ["Ignalina ApS", "Vetra Automation AB"]
description = "Holger's index rows (lane HOL-PERF-2): what the scan worker reads out of a package for its format's index (a deb control stanza, an rpm header, a Chart.yaml, a wheel's METADATA, an npm package.json and its integrity), as one bounded, checked row, so the server renders every index without parsing a package itself."
license = "AGPL-3.0-only"
repository = "https://git.gunnar.rs/nordisk/holger"
categories = ["development-tools"]
keywords = ["airgap", "index", "deb", "rpm", "helm"]
# NETWORK-FREE. Every dependency is already in holger's Cargo.lock.
[dependencies]
serde = { version = "1", features = ["derive"] }
serde_json = "1"
base64 = "0.23"
# The package reads themselves (no feature: every build that has the crate has them, so
# no build declaration ships a feature it does not name; feature honesty, RULE 1).
# deb: the `ar` container is hand-parsed; `tar` unpacks `control.tar.*`, and flate2/liblzma/zstd
# decompress its three real-world codecs. NB: `liblzma` (not `xz2`), to share the single
# `links = "lzma"` native lib with DataFusion's `liblzma-sys`.
tar = "0.4"
flate2 = "1"
liblzma = "0.4"
zstd = "0.14"
# Helm: the chart `.tgz` is inflated by the znippy-zoomies parallel gzip codec, capped.
lgz = "0.3"
# The wheel METADATA member (size-capped, CRC-checked, traversal-closed) and its sha256;
# npm's sha512 integrity.
zip_entry = { package = "holger-zip-entry", version = "3.1.0", path = "../repository/zip-entry" }
sha2 = "0.11"
# A crate's normalised Cargo.toml and a binary crate's Cargo.lock (lane HOL-CARGO-PUBLISH-DOOR).
toml = "1"
[features]
# The in-memory `.deb` / `.rpm` builders, for tests and holger's fuzz seeds. Never shipped.
fixtures = []
[dev-dependencies]
tar = "0.4"
flate2 = "1"
sha2 = "0.11"
zip_entry = { package = "holger-zip-entry", path = "../repository/zip-entry", features = ["fixtures"] }