What precautions does the crates registry have against malicious supply chain attacks?

• cargo-crev

  55 2,030 7.9 Rust

  A cryptographically verifiable code review system for the cargo (Rust) package manager.

  

Cargo crev is a really cool idea to collect code reviews and help you understand your dependencies. https://github.com/crev-dev/cargo-crev

• ed25519

  2 475 0.0 C

  Portable C implementation of Ed25519, a high-speed high-security public-key signature system.

The culture of micro-dependencies. As an example, compere this two cryptography library in Rust and C. The former one depends on quite a few external libraries:

• WorkOS

  workos.com sponsored

  The modern identity platform for B2B SaaS. The APIs are flexible and easy-to-use, supporting authentication, user identity, and complex enterprise features like SSO and SCIM provisioning.

  

• crates.io

  660 2,796 10.0 Rust

  The Rust package registry

  

• rustsec

  33 1,521 9.5 Rust

  RustSec API & Tooling

  

Sadly, not much. Though every Rust user should know about cargo audit.

Suggest a related project