The Stigma Around Unsafe

• rust

  2,681 92,831 10.0 Rust

  Empowering everyone to build reliable and efficient software.

  

See: many resolved I-unsound issues in rust stdlib. Some found and addressed by looking at the problematic code snippets.

• tokio

  196 24,610 9.5 Rust

  A runtime for writing reliable asynchronous applications with Rust. Provides I/O, networking, scheduling, timers, ...

  

"damn good reason" is subjective. Is this a damn good reason? Why not just use a Mutex? What about this?. Context matters.

• InfluxDB

  www.influxdata.com sponsored

  Power Real-Time Data Analytics at Scale. Get real-time insights from all types of time series data with InfluxDB. Ingest, query, and analyze billions of data points in real-time with unbounded cardinality.

  

• actix-web

  171 20,200 9.2 Rust

  Actix Web is a powerful, pragmatic, and extremely fast web framework for Rust.

  

I was going by this issue, which is just a generic highly-upvoted consensus builder against unsafe without any reference to an actual problematic example. The confirmation of unsoundness came after the original post had drawn lots of eyes and people started probing it.

• rio

  7 894 0.0 Rust

  pure rust io_uring library, built on libc, thread & async friendly, misuse resistant (by spacejam)

It's like cargo should have a way to mark a dependency as unsafe. That way, you could have a safe mmap crate as an unsafe dependency. Or something like rio which is deliberately unsound (but is fine if you abide by its rules through the entirety of the program)

• cxx

  97 5,485 9.3 Rust

  Safe interop between Rust and C++

But then this issue seems to have been closed...

• WorkOS

  workos.com sponsored

  The modern identity platform for B2B SaaS. The APIs are flexible and easy-to-use, supporting authentication, user identity, and complex enterprise features like SSO and SCIM provisioning.

  

Suggest a related project