News for hackers. Stuff that matters.
Re:Malicious code in the purescript NPM installer by steveklabnik on Sunday July 28, 2019 @09:57PM (#20550933)
Cargo is more like npm than Bundler in this regard, as Bundler does not let you have multiple versions of a package at the same time. That lesson was learned from npm, though implemented in a different way.

There are no comments on this comment yet.