159
‘No Way To Prevent This,’ Says Only Package Manager Where This Regularly Happens (kevinpatel.xyz)
submitted 3 months ago by to c/programmerhumor@lemmy.ml
13 comments fedilink hide all child comments
you are viewing a single comment's thread
view the rest of the comments
[–] 15 points 3 months ago (1 child)

Cargo distributes libraries as sources, not precompiled objects.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 2 child comments
    •
  • [–] 2 points 3 months ago (1 child)

    Yes, that is true.

    Thought, even this remains problematic because cargo does execute build/compile time scripts, unsandboxed, that can be used to do malicious things, similar to the problems with npm.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 2 child comments
    •