4 ms·
Namespace is merely a workaround, not a solution. Arbitrary namespace prefix is still open for registration so it can be squatted just like package name. One es
by lifthrasiir 2y ago
Namespace is merely a workaround, not a solution. Arbitrary namespace prefix is still open for registration so it can be squatted just like package name. One essential part of the real solution would be sandboxing of build scripts.
- bfrog 2y agoNot if it requires dns verification… which would be great.
- lifthrasiir 2y agoDomain squatting was a thing long before package name squatting.
- bfrog 2y agoyes but its hard to argue that if you've verified that you own say... somecompany.com that you shouldn't have control over the crates.io org for the same name.