vendor entire legacy VC verification path

Cargo.toml

@@ -1,6 +1,5 @@
 [workspace]
 members = [
-  ".",
   "integrity-blob",
   "integrity-cid",
   "integrity-dsse",
@@ -13,17 +12,23 @@ members = [
   "integrity-signer",
   "integrity-vc",
 ]
+exclude = [
+  "vendor/cacaos-0.5.1",
+  "vendor/cid-0.8.6",
+  "vendor/libipld-0.14.0",
+  "vendor/libipld-cbor-0.14.0",
+  "vendor/libipld-core-0.14.0",
+  "vendor/libipld-json-0.14.0",
+  "vendor/libipld-macro-0.14.0",
+  "vendor/multihash-0.16.3",
+  "vendor/ssi-0.7.0",
+  "vendor/ssi-ucan-0.1.1",
+  "vendor/ssi-vc-0.2.1",
+]
 resolver = "2"
 
 [workspace.package]
-version = "0.0.14"
-
-# See vendor/README.md for the rationale and local modifications.
-[patch.crates-io]
-cid = { path = "vendor/cid-0.8.6" }
-libipld-core = { path = "vendor/libipld-core-0.14.0" }
-multihash = { path = "vendor/multihash-0.16.3" }
-ssi-vc = { path = "vendor/ssi-vc-0.2.1" }
+version = "0.0.15"
 
 [package]
 name = "integrity"

Justfile

@@ -4,11 +4,36 @@ _:
 
 # Format Rust code using rustfmt
 fmt:
-    cargo fmt --all --
+    cargo fmt \
+        --package integrity \
+        --package integrity-blob \
+        --package integrity-cid \
+        --package integrity-dsse \
+        --package integrity-ffi \
+        --package integrity-intoto-attestation \
+        --package integrity-jsonld \
+        --package integrity-lineage-models \
+        --package integrity-model-signing \
+        --package integrity-signer \
+        --package integrity-sigstore \
+        --package integrity-vc
 
 # Check if code is formatted correctly without modifying files
 fmt-check:
-    cargo fmt --check
+    cargo fmt \
+        --package integrity \
+        --package integrity-blob \
+        --package integrity-cid \
+        --package integrity-dsse \
+        --package integrity-ffi \
+        --package integrity-intoto-attestation \
+        --package integrity-jsonld \
+        --package integrity-lineage-models \
+        --package integrity-model-signing \
+        --package integrity-signer \
+        --package integrity-sigstore \
+        --package integrity-vc \
+        --check
 
 # Build the project for native target
 build:

integrity-vc/Cargo.toml

@@ -42,7 +42,7 @@ ssi-status = "0.8"
 # v1-era `issuanceDate` plus undefined custom evidence terms, which ssi
 # 0.16's strict JSON-LD pipeline can't reproduce the canonical bytes for.
 # `verify_vc` dispatches to the legacy verifier on detection of that shape.
-ssi-legacy = { package = "ssi", version = "0.7", default-features = false, features = ["w3c", "ed25519", "secp256r1"] }
+ssi-legacy = { package = "ssi", path = "../vendor/ssi-0.7.0", default-features = false, features = ["w3c", "ed25519", "secp256r1"] }
 did-method-key-legacy = { package = "did-method-key", version = "0.2.2" }
 uuid = { version = "1.4", features = ["v4", "serde"] }
 xsd-types = "0.9"