Yes this is a bug. Before modifying Cargo.toml we should chmod +w. Thank you for reporting it. The home-page issue in the importer also needs fixing.
I expressed being against deduplicating the inputs because I think that that is subject to change in the future.