News for hackers. Stuff that matters.

A comment on Rust Dependencies Scare Me. Parent comment

Re:Rust Dependencies Scare Me by dathinab on Friday May 09, 2025 @06:22PM (#43941471)
yes, it's not a issue of code size but a issue of supply chain security/reviewability

it's also not always a fair comparison, if you include tokio in LOC counting then you surely would also include V8 LOC when counting for node, or JRE for Java projects (but not JDK) etc.

[ Parent | on HN ]
Re:Rust Dependencies Scare Me by bigiain on Friday May 09, 2025 @09:12PM (#43942455)
And, reductio ad absurdum, you perhaps also need to count those 27 million LOC in Linux too. (Or however many LOC there are in Windows or macOS or whatever other OS is a fundamental "dependency" for your program.)
[ Parent | on HN ]
Re:Rust Dependencies Scare Me by genewitch on Saturday May 10, 2025 @04:34AM (#43944112)
Or you could use APE and then all of those LOC go away. APE binaries can boot metal, and run on the big 3 OS from the same file.
[ Parent | on HN ]