Incorrect metadata coming from last published version

[kvark]

Case in question: https://crates.io/crates/io-surface

The "Repository" link under "io-surface 0.10.0" at the top is pointing to "https://github.com/servo/io-surface-rs", which is wrong. The repository was moved after 0.9, and the actual Cargo.toml for 0.10.0 has:

homepage = "https://github.com/servo/core-foundation-rs"
repository = "https://github.com/servo/core-foundation-rs"
version = "0.10.0"

@jrmuizel suspects "crates.io" got confused because 0.9.1 was published last. This seems like a bug in the web site.

[sgrif]

This sort of metadata is generally attached to the crate, not the version. (The main exception is authors). Currently we always update this when you upload a new version. Since the most recently uploaded version was 0.9.1, we would have used whatever was in that Cargo.toml.

I think you're right that we should probably only update these fields when a version greater than the current max is uploaded, but I'd like to hear other people's thoughts on this. @ashleygwilliams WDYT?

If we do change this behavior, it's not something that would retroactively apply. You will need to upload a new version with the correct metadata no matter what we decide.

[Turbo87]

It looks like this has been fixed already at some point. https://crates.io/crates/io-surface/0.10.0 is now showing the correct repository link.