link2xt f09f8fd8a4 docs: always suggest using --locked with "cargo install" ...

Otherwise the lockfile is completely ignored
as <https://doc.rust-lang.org/cargo/commands/cargo-install.html#dealing-with-the-lockfile>
says "By default, the Cargo.lock file that is included with the package will be ignored."

Mostly a reaction to <https://blog.rust-lang.org/2026/08/20/supply-chain-attack-on-arrayref/>

2026-08-20 16:00:15 +00:00

..

const.js

api!(npm rpc server): change api: don't search in path unless options.takeVersionFromPATH is set to true

2024-05-20 18:55:05 +02:00

errors.js

docs: always suggest using --locked with "cargo install"

2026-08-20 16:00:15 +00:00