News for hackers. Stuff that matters.
Re:Shai-Hulud Returns: Over 300 NPM Packages Infected by cyphar on Monday November 24, 2025 @01:25PM (#46037252)
You absolutely can, both systems are practically identical in this respect.

> In Go you know exactly what code you’re building thanks to gosum

Cargo.lock

> just create vendor dirs before and after updating packages and diff them [...] I don’t believe I can do the same with Rust.

cargo vendor

There are no comments on this comment yet.