#1148629 ITP: golang-github-rust-secure-code-go-rustaudit -- read cargo-auditable dependency data from Rust binaries

Package:
wnpp
Source:
wnpp
Submitter:
Juan Manuel Méndez Rey
Date:
2026-09-21 12:53:05 UTC
Severity:
normal
#1148629#5
Date:
2026-09-21 12:51:42 UTC
From:
To:
* Package name    : golang-github-rust-secure-code-go-rustaudit
  Version         : 0.0~git20250226.e20ec32
  Upstream Contact: https://github.com/rust-secure-code/go-rustaudit/issues
* URL             : https://github.com/rust-secure-code/go-rustaudit
* License         : Expat
  Programming Lang: Go
  Description     : read cargo-auditable dependency data from Rust binaries

Go library for reading the dependency manifest that cargo-auditable
 embeds into Rust binaries. It locates and decompresses the audit data section
 of ELF, PE, Mach-O and WebAssembly executables and decodes the JSON dependency
 list into Go structs, yielding each crate's name, version and dependency kind
 (runtime, build or development).
 .
 This allows SBOM and vulnerability tooling to enumerate the Rust crates a
 stripped binary was built from without access to its source tree.
 .
 This package is a build dependency of syft (ITP https://bugs.debian.org/1124819).

I intend to maintain this package within the Debian Go Packaging Team.