NPM malware and what it could imply for Cargo

This page summarizes the projects mentioned and recommended in the original post on /r/rust

InfluxDB - Power Real-Time Data Analytics at Scale
Get real-time insights from all types of time series data with InfluxDB. Ingest, query, and analyze billions of data points in real-time with unbounded cardinality.
www.influxdata.com
featured
SaaSHub - Software Alternatives and Reviews
SaaSHub helps you find the best software and product alternatives
www.saashub.com
featured
  • rustsec

    RustSec API & Tooling

  • Use cargo audit or cargo deny to check the crates in your Cargo.lock to ensure they don't contain any vulnerabilities.

  • cargo-crev

    A cryptographically verifiable code review system for the cargo (Rust) package manager.

  • InfluxDB

    Power Real-Time Data Analytics at Scale. Get real-time insights from all types of time series data with InfluxDB. Ingest, query, and analyze billions of data points in real-time with unbounded cardinality.

    InfluxDB logo
  • crates.io

    The Rust package registry

  • Ah wonderful. I had started building something quite like this, where dependencies declared a section in their Cargo.toml's describing their build requirements, and then my program would look those up on crates.io to construct the sandbox.

  • cargo-supply-chain

    Gather author, contributor and publisher data on crates in your dependency graph.

  • I have created cargo supply-chain so you could tell how many people you implicitly trust by compiling and running their software.

  • cargo-deny

    ❌ Cargo plugin for linting your dependencies 🦀

  • Use cargo audit or cargo deny to check the crates in your Cargo.lock to ensure they don't contain any vulnerabilities.

  • wg

    Coordination repository for the Secure Code Working Group (by rust-secure-code)

  • If this topic interests you generally, please check out the Rust Secure Code Working Group.

  • nodo

    Pre-emptively created repository so the design can be discussed on the issue tracker before commits are made (repo name may change)

  • It's using the placeholder name nodo (like "superuser do", but "you no do") and it's currently at https://github.com/ssokolow/nodo

  • SaaSHub

    SaaSHub - Software Alternatives and Reviews. SaaSHub helps you find the best software and product alternatives

    SaaSHub logo
  • watt

    Runtime for executing procedural macros as WebAssembly

  • I really wish there was more interest in getting something like Watt upstreamed.

  • cross

    “Zero setup” cross compilation and “cross testing” of Rust crates

  • I wonder if using something like cross-rs would help.

  • n

    Node version management

  • I know you said it’s a placeholder, but before you get comfortable and don’t wanna change it lol, n is the name of a popular node version manager.

  • dotfiles

  • I experimented a bit with running rust-analyzer under Bubblewrap when using it through NeoVim's LSP integration (see here). Overall it's doable, but it's a tedious process of finding out what needs to write and where, what capabilities you need, etc. I don't see this seeing adoption unless it becomes a first-class feature of the tool in question.

  • node-ipc

    A nodejs module for local and remote Inter Process Communication (IPC), Neural Networking, and able to facilitate machine learning. (by RIAEvangelist)

  • rfcs

    RFCs for changes to Rust

  • There is a new RFC for this. Please comment and help move it forward if you like it: RFC: Packages as (optional) namespaces

  • grapl

    Discontinued Graph platform for Detection and Response

  • SaaSHub

    SaaSHub - Software Alternatives and Reviews. SaaSHub helps you find the best software and product alternatives

    SaaSHub logo
NOTE: The number of mentions on this list indicates mentions on common posts plus user suggested alternatives. Hence, a higher number means a more popular project.

Suggest a related project

Related posts

  • Rust dev fortune

    3 projects | /r/rustjerk | 29 May 2021
  • Rust Tooling: 8 tools that will increase your productivity

    9 projects | dev.to | 15 Feb 2024
  • Rust Offline?

    9 projects | /r/rust | 4 May 2023
  • Should atomics be unsafe?

    4 projects | /r/rust | 18 Feb 2023
  • Release Engineering Is Exhausting So Here's cargo-dist

    8 projects | /r/rust | 1 Feb 2023