Are there any working groups or teams in the rust foundation[0] looking into stuff like this? I know every package manager has these issues but there's no techn

Are there any working groups or teams in the rust foundation[0] looking into stuff like this? I know every package manager has these issues but there's no technical reason preventing us from building sandboxes (i.e. WASM, deno, ...) for this and making it a first class citizen of cargo/rustup/etc. Just installing a relatively popular crate (say Hyper) makes you realize that all of your secret could have been stolen by any of the myriad of dependencies. [0] https://www.rust-lang.org/governance https://www.rust-lang.org/governance