wg VS watt

Check cargo-auditable or this thread on the same topic.

For other repro curious readers, this seems like a good entry point to follow reproducibility efforts: https://github.com/rust-secure-code/wg/issues/28

If this topic interests you generally, please check out the Rust Secure Code Working Group.

The Rust Secure Code Working Group, of which I'm a member, is one. We maintain the RUSTSEC security advisory database at:

The precompiled binary is not a sandboxed WASM binary. Despite the name "watt" it has nothing to do with https://github.com/dtolnay/watt . You can look at the actual code to see for yourself.

* Related: watt is one approach to pre-compile proc-macro crates using WASM.

In addition to thiserror and anyhow, our resident superhuman Rust-improving Robot, dtolnay, also developed an experiment in distributing precompiled proc macros as WebAssembly named Watt and, though I never bothered to create a Zulip account so I don't know what was said, I'm told there has been discussion around the idea of implementing something in that vein.

I think when we have Cranelift, Mold, and maybe Watt all working together then compile times will basically be a non-issue. It'll be a few years though.

Check out https://github.com/dtolnay/watt - it's a really interesting solution to the problem!

I really like the idea of Watt: https://github.com/dtolnay/watt Run macros in a wasm sandbox so they can't touch anything you don't explicitly allow.

I really wish there was more interest in getting something like Watt upstreamed.