sarahsoup
Re:Malicious Rust crate Arrayref runs a build-time payload
on Friday August 21, 2026 @02:16AM (#49384419)
C has a piss poor standard library and doesn't have this problem.
Make dependencies annoying to use and it forces people to be more disciplined about them and if you do insist on a package manager you should not support transitive dependencies at all, packages should be self contained.