5 ms·
Everything you said is correct of course, but the idea of auditing 150 dependencies makes me feel ill. It's essentially impossible for a single person.
by ForTheKidz 2y ago
Everything you said is correct of course, but the idea of auditing 150 dependencies makes me feel ill. It's essentially impossible for a single person.
- steveklabnik 2y agoThis is why sharing code is so important; it doesn't fall on one person, but instead, on the overall community. For example, cargo-vet and cargo-crev allow you to rely on others you trust to help audit dependencies.
- pveierland 2y agoOh, absolutely. Software cannot scale without trust. No single person is capable of auditing their browser or operating system either.
- maccard 2y agoThe effort is _roughly_ proportional - if you need to parse JSON in either language you can write it yourself or use an existing library. Both of those are the same amount of work in c++ and rust.