Cargo.toml

[package]
name = "nativepkg"
version = "0.1.0"
edition = "2024"
# 1.88 because `rpm` >= 0.19 needs it, and 0.19 is where the crate stopped buffering file
# contents in memory. The `msrv` CI job is what enforces this line.
rust-version = "1.88"
description = "Build .deb, .rpm and .pkg.tar.zst packages from any project, directly, in Rust"
license = "MIT"
repository = "https://github.com/ph2ph/nativepkg"
authors = ["Ivan Smirnov"]
readme = "README.md"
keywords = ["deb", "rpm", "arch", "packaging", "systemd"]
categories = ["command-line-utilities", "development-tools::build-utils"]
# What `cargo publish` ships. Fixtures, CI scripts and examples are repository material, not
# something an installer needs.
include = [
    "src/**",
    "templates/**",
    "snippets/**",
    "/README.md",
    "/CHANGELOG.md",
]

[[bin]]
name = "nativepkg"
path = "src/main.rs"

[dependencies]
anyhow = "1.0"
ar = "0.9"
clap = { version = "4.6", features = ["derive"] }
flate2 = "1.1"
# `static` compiles the bundled xz and links it in, so the binary carries no liblzma of its own
# — self-contained on every target, and the only way a macOS build avoids a Homebrew dylib.
liblzma = { version = "0.4", features = ["static"] }
md-5 = "0.11"
# Default features bring an OpenPGP stack for signing (476 crates vs 95). Not a goal.
rpm = { version = "0.27", default-features = false, features = [
    "payload",
    "gzip-compression",
    "zstd-compression",
    "xz-compression",
] }
semver = "1.0"
serde = { version = "1.0", features = ["derive"] }
serde_json = "1.0"
sha2 = "0.11"
tar = "0.4"
thiserror = "2.0"
walkdir = "2.5"
zstd = "0.13"

[dev-dependencies]
# Test oracle for Debian version ordering (policy 5.6.12). Too heavy to ship: 31 crates.
debversion = "0.5"
rpm-version = "0.5"

[lints.rust]
unsafe_code = "forbid"

[lints.clippy]
pedantic = { level = "warn", priority = -1 }
# Generic "# Errors"/"# Panics" sections are boilerplate; the useful ones stay by hand.
missing_errors_doc = "allow"
missing_panics_doc = "allow"

[profile.release]
# The binary is what ships; a slower release build buys a smaller, faster one.
lto = "fat"
codegen-units = 1
strip = true