Comparing Rust supply chain safety tools
Rust makes it easy to add dependencies to your project: edit your
Cargo.toml
(or usecargo add
to have it changed for you from the command line), and you get to use the crate. But do you know what you’ve added to your project? Are you sure you can trust those lines of code?
Source: Comparing Rust supply chain safety tools, an article by Andre Bogus.