Question about crates.io

1

Hi there! :wave:

So basically, I was working on panamax, a solution to mirror crates.io and rustup.
The thing I was working on let me face another problem, which is:

  • Some crates (in fact 2), seems not to be accessible (403 HTTP response code):

Even the fact that those crates are old ones (around 6 to 7 years old), they are not marked as yanked in the index.
I even try from add them as dependencies in a dummy crate and I still have that 403 HTTP response code.

And anyway, I do not need them, but, I am just being curious here :smile:

So here's my question, why those crates can't be downloaded from crates.io? :thinking:

2

Maybe there was a request to delete them because they accidentally contained data that is not supposed to be public (could be anything from accidental copyright infringement, trademark issues, personal/private/sensitive data, etc.). Returning a 403 might be a possible thing to do, but maybe a 410 would be better.

Anyway, it's just a guess. Not sure why these crates are not available.

3

Sure. But, shouldn't they be deleted from the index then?

4

Maybe that's difficult to do due to the architecture? No idea really.

5

There is an issue on GitHub about those crates
https://github.com/rust-lang/crates.io/issues/1177

There are also more problems with the index
https://github.com/rust-lang/crates.io/issues/1593

6

Oh. Thanks, didn't even think about looking over there.

7

This topic was automatically closed 90 days after the last reply. We invite you to open a new topic if you have further questions or comments.