meson: Don't vendor dependencies in dist

We already had attacks on tarballs on the original package levels with
XZ Utils. If we bundle a lot of tarballs in every of our tarballs, that
makes things even harder to trace.
This commit is contained in:
Sophie Herold 2024-09-27 21:28:52 +02:00
parent f6b7ae7567
commit b54e85a5a6
2 changed files with 0 additions and 19 deletions

View file

@ -1,9 +0,0 @@
#!/bin/sh
export DIST="$1"
export SOURCE_ROOT="$2"
cd "$SOURCE_ROOT"
mkdir "$DIST"/.cargo
cargo vendor | sed 's/^directory = ".*"/directory = "vendor"/g' > $DIST/.cargo/config
# Move vendor into dist tarball directory
mv vendor "$DIST"