this post was submitted on 20 Aug 2026
29 points (96.8% liked)

Rust

8358 readers
21 users here now

Welcome to the Rust community! This is a place to discuss about the Rust programming language.

Wormhole

!performance@programming.dev

Credits

  • The icon is a modified version of the official rust logo (changing the colors to a gradient and black background)

founded 3 years ago
MODERATORS
snowe@programming.dev
Ategon@programming.dev
EdTheLegendary@programming.dev
torcherist@programming.dev
29
Supply chain attack on arrayref (blog.rust-lang.org)
submitted 2 months ago by cm0002@europe.pub to c/rust@programming.dev
5 comments fedilink hide all child comments
you are viewing a single comment's thread
view the rest of the comments
[–] naonintendois@programming.dev 2 points 2 months ago (2 children)

How do you set that up?

[–] chickenf622@sh.itjust.works 5 points 2 months ago

I'm not a rust user but it looks like the feature is in their unstable branch https://doc.rust-lang.org/nightly/cargo/reference/unstable.html#min-publish-ag. Also looks like someone made a crate to do that called cargo-cooldown. These supply chain attacks have been more frequent only recently so a lot of ecosystems are still working on implementing this kind of feature.

[–] blazebra@programming.dev 1 points 2 months ago

Configure your updater and use exact or semi-exact versions.