From: Ian Jackson Date: Wed, 4 Sep 2019 14:13:28 +0000 (+0100) Subject: adjust re node.js ishness X-Git-Url: http://www.chiark.greenend.org.uk/ucgi/~ijackson/git?a=commitdiff_plain;h=5760f2a16d744ee22a7514efe848de832f10d297;p=talk-2019-ghm-rust.git adjust re node.js ishness Signed-off-by: Ian Jackson --- diff --git a/talk.txt b/talk.txt index 088d44f..66bd96d 100644 --- a/talk.txt +++ b/talk.txt @@ -237,9 +237,10 @@ purpose is to automatically download stuff from the internet and run it. Apparently this is what is expected by the youth of today. It can be hit hard enough to stop it doing this, but you still run into the difficulty that if you use one library from the repository, you -end up having to trust much more widely than ideal. And at least +end up having to trust much more widely than ideal. At least Rust's repository contains larger libraries than, say node.js's, so -the number of people you're trusting is much lower. +the number of people you're trusting is much lower, but it's still +troublesome. Also, as a build tool, cargo can be very inflexible. Despite an official policy that cargo should be suitable for running inside