Re:Rust Dependencies Scare Me
by nullc on Saturday May 10, 2025 @07:55AM
(#43944961)
I was very 'impressed' to see multiple SSL libraries pulled into rust software that never makes a network connection.
[ Parent
| on HN ]
This is where a) a strong stdlib and b) community consensus on common packages tends to help at least mitigate the problem.
My feeling is that Python scores fairly well in this regard. At least it used to. I haven't been following closely in recent years.
A lot of people dunk on Java, but its standard library is rock solid. It even is backward compatible (mostly).