3 ms·
> Nearly every Linux distribution, for example. What’s special about Rust in that binaries for dependencies are a problem? The inability to opt out of running
by monocasa 3y ago
> Nearly every Linux distribution, for example. What’s special about Rust in that binaries for dependencies are a problem?
The inability to opt out of running a non-reproducible binary library just to build code. This isn't just devs complaining, it's against several large orgs security policies.
> Also, for the “why” - is it just the very slow build times for Rust?
It's an initial build time thing. It makes no difference except after a full clean or fresh build.
- dlisboa 3y agoCan’t you “vendor” the crate and compile it yourself? Much like cargo does with workspaces, setting the local path to it. I’m still learning the Rust environment but usually vendoring is what you do when you want full control.
- monocasa 3y agoThe binary is in the package you would be vendoring. That's half the problem; the maintainer put binaries in something consumers treat as a source archive.