22
How Safe is the Rust Ecosystem? A Deep Dive into crates.io (mr-leshiy-blog.web.app)
submitted 10 months ago by to c/rust@programming.dev
5 comments fedilink hide all child comments
 

cross-posted from: https://lemmy.bestiver.se/post/854816

Comments

you are viewing a single comment's thread
view the rest of the comments
[–] 5 points 10 months ago (1 child)

Yeah unfortunately these numbers don't really allow any conclusions to be drawn at all.

Also they're not really related to supply chain security which is more about deliberate subterfuge. I think the interesting stat there would be how many authors are being trusted typically for each crate.

  • permalink
  • fedilink
  • source
  • hideshow 1 child comment
    •
  • [–] 2 points 10 months ago

    I have the feeling that this wasn't even done properly (e.g. checking default versions only). Using downloads alone is also not a good filter.

    I may give this some time tomorrow and provide my own numbers.

  • permalink
  • fedilink
  • source
  • parent