2 ms·
crates.io isn't the ultimate ivory tower. It is an open space for anyone wanting to share and upload code. It is your responsibility to vet your dependencies.
by throwfaraway12 6y ago
crates.io isn't the ultimate ivory tower. It is an open space for anyone wanting to share and upload code.
It is your responsibility to vet your dependencies. For anything serious, you better setup a layered review process.
If you want a "vetted crates.io", then propose that. I’d be in favor. I certainly never liked crates.io to be the next NPM.
But telling people their crates are "evil" and trying to get them banned is breaking the CoC. The people uploading "broken" code, no matter how much they upload, aren’t the ones breaking it.