Are checksum crate names allowed?

[heisen-li]

Are there currently similar community norms? Or check mechanism? Is this behavior allowed?

[Turbo87]

AFAICT it is not against our current publishing policies, though I admit that I'm not a huge fan of this behavior either. As we've written here multiple times already, changing the policies will most likely require an RFC. You're very welcome to work on that if you're interested in helping.

[heisen-li]

Of course, I'm more than happy to help. This behavior is obviously inappropriate, but I haven't figured out how to prevent it. Or, what should I do next?

[carols10cents]

I think the first step is articulating why the behavior is obviously inappropriate (that is, how exactly it hurts the Rust community and how crates.io would automatically detect it). Then work on several proposed solutions and write out the advantages and disadvantages of each. Take a look at the RFC instructions in the RFC repo's README, and feel free to open a "pre-RFC" on https://internals.rust-lang.org/ to get early feedback.

[heisen-li]

Thanks Reply. I created the most original discussion thread. Many ideas are immature and need to get feedback from everyone. I will continue to follow this discussion. If you have better descriptions and suggestions, please feel free to enlighten me.https://internals.rust-lang.org/t/pre-rfc-prevent-abnormal-release-of-crates/15729