I've been wanting to write rust for quite some time, but I can't get over crates. The system just seems insecure to me. What happens in 10 years when the servers go down? Is there any sort of mitigation for supply chain attacks?
As I understand it anyone can submit code; what's stopping someone from putting malicious code into a crate I've been using?
I suppose these are risks for any third party package system though.
I've used Flutter infrequently and have experienced things like this with their package system.
Mini glass bottles, engines, vehicles, whatever. Extra points if it functions exactly as the full size thing.
My friend just gave me a mini tooth paste tube about an inch and a half tall with 3.3ml of toothpaste; made by Colgate for airplanes. Coolest thing I've collected in a while.
When he was young (1950's), he and his dad were spraying a field in the Mississippi Delta. He decided to get off the tractor to walk around and try to catch some toads. He eventually got tired and found some flowers, picked them and laid down to take a nap holding the flowers over his belly. At the end of the day his dad started looking for him. After a while his dad found him, laying in the field with flowers over his belly. He thought he was dead.
Thanks for your detailed input, I'm glad to hear that there is a team that does look out for things at crates.io, and that I can host my own registry.