4 ms·
Interesting, but I wonder how this works in purely namespaced systems - if non standard names are more popular in, say, maven. I don't know. I'm unconvinced th
by staticassertion 7y ago
Interesting, but I wonder how this works in purely namespaced systems - if non standard names are more popular in, say, maven.
I don't know. I'm unconvinced that this is a meaningful metric, and I worry more about typosquatting/ malicious dependencies, which, to my knowledge, crates.io does almost nothing to proactively deal with.
- steveklabnik 7y agoNamespacing doesn’t solve typosquatting or malicious dependencies. You typosquat the namespace instead. Any dependency can become malicious.
- staticassertion 7y agoYeah, you're right.