>It seems like your options are carefully auditing all dependencies "given enough eyeballs, all bugs are shallow" Rust has an eyeball problem. Not saying this

>It seems like your options are carefully auditing all dependencies "given enough eyeballs, all bugs are shallow" Rust has an eyeball problem. Not saying this solves everything, but it certainly isn't helping. NPM has had several catastrophic security failures, but they all seem to be noticed rather quickly due only to the staggering number of people using JS.