🧊 Rust 1.100 will let developers put fresh dependency releases on ice. Cargo’s opt-in cooldowns give researchers and maintainers time to catch malicious crates before more projects pull them in. socket.dev/blog/rust-ca...
socket.devRust 1.100 Will Add Dependency Cooldowns to CargoRust 1.100 will add opt-in dependency cooldowns to Cargo, giving security scanners and maintainers time to catch malicious crate releases.
1 repost5 likes