0.4.0 (current) Thoroughness: Medium Understanding: Medium
by matthiasbeyer on 2023-06-07
This review is from Crev, a distributed system for code reviews. To add your review, set up cargo-crev
.
0.4.0 (current) Thoroughness: Medium Understanding: Medium
by matthiasbeyer on 2023-06-07
Crates in the crates.io registry are tarball snapshots uploaded by crates' publishers. The registry is not using crates' git repositories. There is absolutely no guarantee that the repository URL declared by the crate belongs to the crate, or that the code in the repository is the code inside the published tarball.
To review the actual code of the crate, it's best to use cargo crev open cloudmqtt
. Alternatively, you can download the tarball of cloudmqtt v0.4.0 or view the source online.
I know that there's one line unsafe in this crate, which is necessary for zero-copying reasons. I am positive that the crate is completely safe to use and I know the author personally.