▲ 28 ▼ Supply chain attack on arrayref (blog.rust-lang.org) submitted 1 week ago by cm0002@europe.pub to c/rust@programming.dev 5 comments fedilink hide all child comments
[–] naonintendois@programming.dev 2 points 1 week ago (2 children) How do you set that up? permalink fedilink source parent hideshow 4 child comments replies: [–] chickenf622@sh.itjust.works 5 points 1 week ago I'm not a rust user but it looks like the feature is in their unstable branch https://doc.rust-lang.org/nightly/cargo/reference/unstable.html#min-publish-ag. Also looks like someone made a crate to do that called cargo-cooldown. These supply chain attacks have been more frequent only recently so a lot of ecosystems are still working on implementing this kind of feature. permalink fedilink source parent [–] blazebra@programming.dev 1 point 1 week ago Configure your updater and use exact or semi-exact versions. permalink fedilink source parent
[–] chickenf622@sh.itjust.works 5 points 1 week ago I'm not a rust user but it looks like the feature is in their unstable branch https://doc.rust-lang.org/nightly/cargo/reference/unstable.html#min-publish-ag. Also looks like someone made a crate to do that called cargo-cooldown. These supply chain attacks have been more frequent only recently so a lot of ecosystems are still working on implementing this kind of feature. permalink fedilink source parent
[–] blazebra@programming.dev 1 point 1 week ago Configure your updater and use exact or semi-exact versions. permalink fedilink source parent