When security is a concern, developers can simply avoid using untrusted crates. But concerns over security are not reason for a package manager to not even exis

When security is a concern, developers can simply avoid using untrusted crates. But concerns over security are not reason for a package manager to not even exist. Pretty much every major language and operating system has a package manager. While supply chain attacks are real, they are not unique to Rust in any way.