{
"$type": "site.standard.document",
"bskyPostRef": {
"cid": "bafyreieejfyz7dxvhfmgi44h5j3ef7rkgm2uaitdbncegfno4uh35po7qy",
"uri": "at://did:plc:ivbknywyskln22er3nkssdhl/app.bsky.feed.post/3mo5tdiveusn2"
},
"path": "/t/separating-fetching-from-building-for-better-security/24390#post_14",
"publishedAt": "2026-06-13T06:38:13.000Z",
"site": "https://internals.rust-lang.org",
"textContent": "grothesque:\n\n> According to my understanding `cargo vendor` suffers from the same problem as `cargo fetch` with regard to features (see above).\n\n`cargo vendor` will vendor all crates included in the lockfile by default, even if no combination of target and features can actually build a given crate.",
"title": "Separating fetching from building for better security"
}