Re:Malicious Rust crate Arrayref runs a build-time payload
by DanielHB on Thursday August 20, 2026 @10:30AM
(#49375114)
The reason is simple: the package manager works well. Helps if the package manager is standardized and there is a "default" registry for open source projects.
I remember the days where I had to manually put the Spring .jar files into my project. No way I am doing that for 100s of dependencies.
I remember the days where I had to manually put the Spring .jar files into my project. No way I am doing that for 100s of dependencies.