Where can a dependency be specified if not in Cargo.toml?

Question

I'm looking at the ring crate. In its Dependencies tab I see there is a dependency to the web-sys crate. But in ring's Cargo.toml I don't see web-sys mentioned anywhere. So where does that dependency come from?

It could be a indirect dependency, a dependency of a dependency of `ring` — mousetail, Dec 07 '22 at 14:21

score 1 · Accepted Answer · answered Dec 07 '22 at 14:38

1

You're comparing apples to oranges. You're seeing the dependencies of version 0.16.20 and comparing that with the current Cargo.toml even when there are nearly two years of difference between them.

If you look at the repository at the 0.16.20 release, you'll see that Cargo.toml does have a web-sys dependency: https://github.com/briansmith/ring/tree/9cc0d45f4d8521f467bb3a621e74b1535e118188

answered Dec 07 '22 at 14:38

kmdreko

42,554
6
57
106

Ah, yes. I thought I had checked the previous version as well, but apparently I was wrong. Thanks! But anyway, are there other places where a dependency could be specified? – at54321 Dec 07 '22 at 15:31
1

No, I don't think so – kmdreko Dec 07 '22 at 15:38

Where can a dependency be specified if not in Cargo.toml?

1 Answers1