Skip to content

Comment on Show HN: ut – Rust based CLI utilities for devs and IT

Comments

When importing a library, it becomes part of your project, therefore it becomes your responsibility to ensure that the imported code is safe and sound.

I am seeing the list of dependencies, and even without looking at the transitive ones, I am sure you didn't review any of those, nor will properly maintain that huge list.

That's a supply chain ticking bomb in my book.

I like Rust, but most projects look like kindergarten collage with no regards to security.

AboutSource Built by g1lg1l

Hackerly is an independent reader for Hacker News, built on the public HN API. Not affiliated with Y Combinator.