[vlmutolo]

I previously asked "why cargo vet instead of extending crev" and I think the answer was that architecturally cargo-crev is meant to be a single repository of public audits, where as cargo-vet aims for a decentralized system where anyone can publish an audit anywhere, and each individual project has to opt into which audit databases they trust.

Also cargo-vet has some good ideas about how to suddenly introduce cargo-vet into an existing codebase.