Thanks for assembling this list, I'll reply to each. > Some members think squatting is not a problem, let people take all names, and then people will invent cr

Thanks for assembling this list, I'll reply to each. > Some members think squatting is not a problem, let people take all names, and then people will invent creative ones, like nokogiri in Ruby. I think we can agree that time has proven this one to be wrong (predictably). > Adding of namespaces only moves the squatting problem from squatting crate names to squatting namespaces. This is why Maven uses two schemes, io.github.username (and similar) in case of Git hosting services, or proven domain ownership via DNS TXT records. There has been zero drama in many years of having this scheme. [0] > Using usernames for namespaces makes typosquatting even worse Yes this is not a good idea. > crates.io relies on GitHub for identities, but GitHub usernames are not permanent A "published artifacts may never be unpublished" rule should solve that, plus protecting a namespace (groupId) once it has been used to upload an artifact by credentials. > Crate names map to Rust identifiers TBH I don't get that one. It seems this is more like a technical question of how to mangle symbols? > There's already a ton of non-namespaced crates Maven had the same issue, it is no really a problem, just confusing bc for a while there will be duplicates (could be solved by redirects). > Having anti-squatting policy is laborious to enforce Understandable. I think using the Maven scheme, it should be fully automatable, but I'm not sure. > crates.io is understaffed Understandable. I suspect corporations could be interested in having this managed properly, as this is a security issue. Possible revenue stream via managed services (Maven does this)? > people also proposed different approaches, like UUIDs/hashes/git URLs Haven't looked at this in detail, seems inferior because mnemonics are important, and Git URLs alone are too limited. [0] https://central.sonatype.org/publish/#individual-projects-open-source-software-repository-hosting-ossrh https://central.sonatype.org/publish/#individual-projects-op...