144
you are viewing a single comment's thread
view the rest of the comments
[-] pivot_root@lemmy.world 15 points 1 day ago

Cargo distributes libraries as sources, not precompiled objects.

Yes, that is true.

Thought, even this remains problematic because cargo does execute build/compile time scripts, unsandboxed, that can be used to do malicious things, similar to the problems with npm.

[-] locuester@lemmy.zip 10 points 1 day ago

But “you would have to reverse engineer binaries” is objectively false, since packages are source.

I agree on your other point, but you really should edit the misinformation.

this post was submitted on 16 May 2026
144 points (98.0% liked)

Programmer Humor

42188 readers
333 users here now

Post funny things about programming here! (Or just rant about your favourite programming language.)

Rules:

founded 6 years ago
MODERATORS