Dependencies are a huge supply chain security risk; the more of them you have, and the more often you update, the bigger the attack surface.
  • BB_C@programming.dev
    1·
    2 months ago

    I will let you expand on this before responding to both:

    And also, cargo.toml has inconsistencies and double-standards.