Dependencies are a huge supply chain security risk; the more of them you have, and the more often you update, the bigger the attack surface.
    • TehPers@beehaw.orgEnglish
      3·
      20 days ago

      I don’t see why not. Cargo is fundamentally just a fancy wrapper around rustc, anyway. Sure, it’s a really fancy wrapper that does a lot of stuff but it’s entirely possible to just call rustc yourself.