I'm hoping "cargo vet"'s approach to supply chain security becomes standard practice: https://mozilla.github.io/cargo-vet/ https://mozilla.github.io/cargo-vet/

I'm hoping "cargo vet"'s approach to supply chain security becomes standard practice: https://mozilla.github.io/cargo-vet/ https://mozilla.github.io/cargo-vet/ Adding a "pay upstream" feature to it would probably be minimal incremental effort. Someone is already supposed to pay the third-party auditors, after all.