@glyph @maxMaximilian Hils Back in the Python world, PDM has the ability to specify either a single package name, or a glob pattern, to associate with a specific alternative source:

pdm-project.org/latest/usage/c

I've used this at work to tell it to pull "companyname-*" from our index instead of PyPI, but the single-package-name form of it lets you accomplish the same thing (I think) as that Cargo "patch" example.

0

If you have a fediverse account, you can quote this note from your own instance. Search https://infosec.exchange/users/ubernostrum/statuses/115535902559028704 on your instance and quote it. (Note that quoting is not supported in Mastodon.)