this post was submitted on 04 Sep 2026
-20 points (11.5% liked)
Rust
8337 readers
30 users here now
Welcome to the Rust community! This is a place to discuss about the Rust programming language.
Wormhole
Credits
- The icon is a modified version of the official rust logo (changing the colors to a gradient and black background)
founded 3 years ago
MODERATORS
you are viewing a single comment's thread
view the rest of the comments
view the rest of the comments
Some feedback:
You have effectively hardcoded the list of software you support, ideally you should be able to dynamically update the list, otherwise you have no way to revoke or update versions if required. And if its hardcoded, why bother network requesting for it, just build it into the binary. Would be a little larger binary, but even faster.
Meaningless, there is no dependency resolution because thats done for you by the installers.
The task you are doing is entirely IO bound, rusts performance is irrelevant.
Actually, I have a Gist for this that you can use. I update the Gist from time to time. In fact, the
sources.listfile can be customized specifically.The point is that you pinned a specific commit instead of a branch like
mainAnd yeah calling dependency resolution fragile is weird. It is not an actual package manager, just a download tool.
I already use tags for releases. The commit hash is for development. You can check the releases page.