-
I invented the program chkccomp.c to find out all properties of C, its run-time and other C libraries (operating system + third party). When you compile Seed7 this program creates hundreds of little test programs that are compiled linked and executed. With that information chkccomp.c writes several hundred lines of property macros to a file named version.h, Other projects use shell scripts for this purpose (./configure comes into mind), but these scripts usually do not work for Windows.
-
SaaSHub
SaaSHub - Software Alternatives and Reviews. SaaSHub helps you find the best software and product alternatives
-
As for privacy and safety of people, https://github.com/betrusted-io/xous-core/issues/57 way past 1.0. Imagine that. Heh.
-
You can also see https://github.com/google/moveit as a crate for solving problems like this right now, with this conference talk from the author.
-
These kinds of problems affect all software in all programming languages. At the end of the day, you have to have your build process and testing sandboxed if you can't afford to review every dependency update. Companies who have strict policies about this can host their own internal Crates.io mirror so internal projects can only rely on audited crates. For Rust, Carnet is a wrapper for Cargo which sandboxes builds with bubblewrap on Linux.