Security advisory: malicious crate rustdecimal | Rust Blog

• cargo-crev

  55 2,030 7.9 Rust

  A cryptographically verifiable code review system for the cargo (Rust) package manager.

  

To me, the only solution is something like https://github.com/crev-dev/cargo-crev , though I'd be keen to see it be something "blessed" by the Rust team in a more official way.

• crates.io

  660 2,796 10.0 Rust

  The Rust package registry

  

In fact, the crates.io team can go check this themselves, I think? If it's possible to see "which packages did people request that didn't exist" I suspect they'll find an edit distance of 1 character in >90% of cases. But they don't even have to - there's actually already plenty of research and plenty of attacks that we can look at.

• InfluxDB

  www.influxdata.com sponsored

  Power Real-Time Data Analytics at Scale. Get real-time insights from all types of time series data with InfluxDB. Ingest, query, and analyze billions of data points in real-time with unbounded cardinality.

  

• wasmtime

  172 14,407 10.0 Rust

  A fast and secure runtime for WebAssembly

  

Heh, earlier this year my company actually contributed networking support to WASI and implemented it in Wasmtime: https://github.com/bytecodealliance/wasmtime/issues/3730 . I can't say we have anything that's "production-quality" yet, but we are using it successfully.

• wapm-cli

  11 361 4.9 Rust

  Discontinued 📦 WebAssembly Package Manager (CLI)

  

One step closer to the day when I can put actix-web creations up on WAPM so "Just type wax my-cool-thing to try it out" can be one of the distribution options.

• watt

  21 1,219 7.3 Rust

  Runtime for executing procedural macros as WebAssembly

Check out https://github.com/dtolnay/watt - it's a really interesting solution to the problem!

• WASI

  45 4,582 7.0 Rust

  WebAssembly System Interface

  

The biggest blocker right now is the lack of support in the standard: https://github.com/WebAssembly/WASI/issues/370

• cargo-geiger

  30 1,310 5.4 Rust

  Detects usage of unsafe Rust in a Rust crate and its dependencies.

  

Or rather, the only thing it guarantees is that in certain parts of the code (the parts you don't trust) you can't use unsafe stuff. Which is exactly what #![forbid(unsafe_code)] does! Or some use of https://github.com/rust-secure-code/cargo-geiger or something.

• WorkOS

  workos.com sponsored

  The modern identity platform for B2B SaaS. The APIs are flexible and easy-to-use, supporting authentication, user identity, and complex enterprise features like SSO and SCIM provisioning.

  

• ATS-Postiats

  18 349 0.0 ATS

  ATS2: Unleashing the Potentials of Types and Templates

For a low level language in which you actually need to prove that your code doesn't cause UB, see http://www.ats-lang.org/

Suggest a related project