Post

Rust shouldn't have a package manager, adding dependencies should be explicitly harder because now you have the JavaScript and python problem where you have an incredible dependence on packages which may not even be maintained anymore

Worst take maybe ever, if there was a downvote button I would give it to you. One of Rust's biggest ups coming from C/C++/Zig/... is that packages "just work", in a centralized place. If you took away crates, I probably wouldn't even consider Rust.

The problem with dependencies is that they *are dependencies*. It is fine is you implement some stuff yourself. Seeing stuff like this just makes my blood boil: crates.io/crates/is-odd. This stupid thing has 21k downloads. You add trust for code you can easily do yourself and thus possibly...

introducing vulns because someone decided to be a bad actor.