| ▲ | mkl a day ago | |
> cargo install ignores the minimum publish age, for both the installed crate and its dependencies Why is that? It seems like that makes min-publish-age much less effective. | ||
| ▲ | epage a day ago | parent | next [-] | |
This comes from usability and consistency. When we added the MSRV aware resolver, we decided to have it not affect `cargo install` because you could get an old version and not notice (especially with how noisy cargo is) when the right answer might be to upgrade. Somewhat similar for min-publish-age but also we had defined the parent table for these config fields to not affect install. The change to `--locked` made us feel a little better with this non-ideal circumstance. | ||
| ▲ | GolDDranks a day ago | parent | prev [-] | |
The fact that install now uses the lockfile by default, mitigates this, I think. | ||