Repository: dropbox/rust-brotli (language: rust)

Issue:
Uploaded source code contains binary data
While looking through the changes of a recent update of the brotli crate I noticed that the source code uploaded to crates.io contains the binary test data: https://diff.rs/brotli/6.0.0/7.0.0/testdata

Given the recent xz incident that might not be desirable as it makes it harder to review what's going on inside the binary data. Additionally these data add unneeded bloat to the source code.


Discussion / hints:
We are a standardized format. These files are bit-for-bit identical with https://github.com/google/brotli and people can validate they don't just change on a whim. If we deleted these files how could we assert backwards compatibility.
We need the files. They serve a purpose. Binary doesn't mean scary--they are also human readable if you read the spec.

@danielrh Nevertheless binary files can be a security problem as shown by the xz incident earlier this year. Given the existence of this files in the uploaded tar balls it really hard to judge for outsiders where these files are coming from and what they contain. I cannot see that documented. And even if they are bit-to-bit identical to the google files that doesn't say anything about them being malicious or not, just that they are the same as those files provided by google. 

Also to be clear here: I don't suggest that you remove them for the repo. I agree that they are useful for tests. What I'm asking for is to exclude them from the source code uploaded to crates.io.  They don't need to be there as you cannot run tests from these uploads anyway. Even outside from the security perspective that's just a waste of space there. 
Cargo even offers an [easy way to exclude these files on publish](https://doc.rust-lang.org/cargo/reference/manifest.html#the-exclude-and-include-fields). 

Fix patch:
diff --git a/Cargo.toml b/Cargo.toml
index a6479f2f..46fecc5c 100644
--- a/Cargo.toml
+++ b/Cargo.toml
@@ -13,6 +13,13 @@ readme = "README.md"
 autobins = false
 edition = "2015"
 rust-version = "1.59.0"
+include = [
+  "/src/**/*.rs",
+  "/examples/**/*.rs",
+  "/Cargo.toml",
+  "/README.md",
+  "/LICENSE.MIT",
+]
 
 [[bin]]
 doc = false


Test patch: