News for hackers. Stuff that matters.
Re:Dozens of malicious PyPI packages discovered targeting de... by galangalalgol on Wednesday November 02, 2022 @08:17PM (#33444870)
Rust is another example of this. Just bringing in grpc and protobuf gets about a hundred dependencies. Some of them seemingly unrelated. For a language aimed at avoiding security bugs, I find this to be an issue. But a good dependency manager and a small (or optionally absent) stdlib has lead to highly granular dependencies and bringing in giant libs for tiny bits.

There are no comments on this comment yet.