• who@feddit.org
    link
    fedilink
    English
    arrow-up
    5
    ·
    12 days ago

    I count 341 dependencies. This massive attack surface might be a problem for people who care about security.

    To be clear, this is not unusual in the Rust ecosystem. It’s a bit of an awkward situation: Rust’s big value proposition is security through memory safety, but that is undermined by its not-especially-rich standard library and Cargo’s encouragement of pulling in many dependencies. I hope this will improve in the years to come.