Re:Dozens of malicious PyPI packages discovered targeting de...
by galangalalgol on Wednesday November 02, 2022 @08:17PM
(#33444870)
Rust is another example of this. Just bringing in grpc and protobuf gets about a hundred dependencies. Some of them seemingly unrelated. For a language aimed at avoiding security bugs, I find this to be an issue. But a good dependency manager and a small (or optionally absent) stdlib has lead to highly granular dependencies and bringing in giant libs for tiny bits.
[ Parent
| on HN ]
There are no comments on this comment yet.