3 ms·
> I am proposing that Debian should routinely compile Rust packages against dependencies in violation of the declared semver, and ship the results to Debian’s m
by josephcsible 2y ago
> I am proposing that Debian should routinely compile Rust packages against dependencies in violation of the declared semver, and ship the results to Debian’s millions of users.
That sounds like a recipe for a lot more security vulnerabilities like https://news.ycombinator.com/item?id=30614766 https://news.ycombinator.com/item?id=30614766