Re:Someone Bought 30 WordPress Plugins and Planted a Backdoo...
by MarsIronPI on Monday April 13, 2026 @03:49PM
(#47756989)
Rust is like this too. Every time I open a Rust project I look at Cargo.lock and see hundreds of recursive dependencies. Compared to traditional C or C++ projects it's madness.
[ Parent
| on HN ]
Re:Someone Bought 30 WordPress Plugins and Planted a Backdoo...
by petcat on Tuesday April 14, 2026 @08:00AM
(#47764475)
> Compared to traditional C or C++ projects it's madness.
Those projects typically rely on an external package manager to handle their dependencies for them. Apt, yum, etc. Otherwise you end up in dependency hell trying to get ./configure to find the development headers of whatever it needs. I don't miss those days. Rust/Cargo is a godsend.
Re:Someone Bought 30 WordPress Plugins and Planted a Backdoo...
by MarsIronPI on Tuesday April 14, 2026 @08:02AM
(#47764497)
It may be better from a DX perspective, but it's pure pain for distros like Debian who don't want to use cargo at build time to fetch arbitrary dependencies and instead use vetted system versions.