Crate "wright" has two 0.2.2 versions

[SimonSapin]

download-all-crates from https://github.com/est31/cargo-local-serve (CC @est31) produces (among others) this line of output:

[70804/71928] Checksum mismatch for wright v0.2.2. Deleting. expected: '8261a34961de4a333d2c8e15309c32d35df864709799112002edcffc1316369f' was: '14f813076f3bd61b143e7094808057970f40366ee27b1252b758b407fbc661d2'

It turns out the index contains two separate entries for wright v0.2.2, with different checksums:

curl -s https://raw.githubusercontent.com/rust-lang/crates.io-index/master/wr/ig/wright \
    | jq 'select(.vers == "0.2.2")'

{
  "name": "wright",
  "vers": "0.2.2",
  "deps": [
    {
      "name": "ansi_term",
      "req": "^0.10.2",
      "features": [],
      "optional": false,
      "default_features": true,
      "target": null,
      "kind": "normal"
    },
    {
      "name": "regex",
      "req": "^0.2",
      "features": [],
      "optional": false,
      "default_features": true,
      "target": null,
      "kind": "normal"
    }
  ],
  "cksum": "8261a34961de4a333d2c8e15309c32d35df864709799112002edcffc1316369f",
  "features": {},
  "yanked": false
}
{
  "name": "wright",
  "vers": "0.2.2",
  "deps": [
    {
      "name": "ansi_term",
      "req": "^0.10.2",
      "features": [],
      "optional": false,
      "default_features": true,
      "target": null,
      "kind": "normal"
    },
    {
      "name": "regex",
      "req": "^0.2",
      "features": [],
      "optional": false,
      "default_features": true,
      "target": null,
      "kind": "normal"
    }
  ],
  "cksum": "14f813076f3bd61b143e7094808057970f40366ee27b1252b758b407fbc661d2",
  "features": {},
  "yanked": false
}

The tarball we can download matches the second one:

% curl -sL https://crates.io/api/v1/crates/wright/0.2.2/download | sha256sum 
14f813076f3bd61b143e7094808057970f40366ee27b1252b758b407fbc661d2  -

• Maybe the index should be manually fixed to remove the first entry?
• Maybe this is a symptom of race condition bug in the crate publication code?

[est31]

commit 49e7fe366466a9b704b0120375e79b9c2702c209
Author: bors <bors@rust-lang.org>
Date:   Thu Nov 9 05:13:36 2017 +0000

    Updating crate `wright#0.2.2`

commit 707c8871c241e3aacfd05c6aa8ab7e6762f01514
Author: bors <bors@rust-lang.org>
Date:   Thu Nov 9 05:12:44 2017 +0000

    Updating crate `wright#0.2.2`

The commit times are indeed very close (52 seconds).

[iscgar]

The same thing happened with stitch 0.1.0 on April 4th:

{
    "name": "stitch",
    "vers": "0.1.0",
    [ ... snip ... ]
    "cksum": "2a8e0e631405ef2ae838a7255e700798f25dc5372317b533bdaf142f57292703",
    "features": {},
    "yanked": false,
    "links": null
} {
    "name": "stitch",
    "vers": "0.1.0",
    [ ... snip ... ]
    "cksum": "137caee31d931fd98d8357209e5c9ee3a1a694f709a8c2261cc6bdee44e613e4",
    "features": {},
    "yanked": false,
    "links": null
}

Also, the following crates have double entries but at least they are identical:

• zaif-api-0.1.0
• replicante_agent_models-0.1.1
• dep_d-3.1.0
• dep_c-1.0.0

[Turbo87]

AFAICT This has been fixed by our recent index normalization run.