From 5760f2a16d744ee22a7514efe848de832f10d297 Mon Sep 17 00:00:00 2001 From: Ian Jackson Date: Wed, 4 Sep 2019 15:13:28 +0100 Subject: [PATCH] adjust re node.js ishness Signed-off-by: Ian Jackson --- talk.txt | 5 +++-- 1 file changed, 3 insertions(+), 2 deletions(-) diff --git a/talk.txt b/talk.txt index 088d44f..66bd96d 100644 --- a/talk.txt +++ b/talk.txt @@ -237,9 +237,10 @@ purpose is to automatically download stuff from the internet and run it. Apparently this is what is expected by the youth of today. It can be hit hard enough to stop it doing this, but you still run into the difficulty that if you use one library from the repository, you -end up having to trust much more widely than ideal. And at least +end up having to trust much more widely than ideal. At least Rust's repository contains larger libraries than, say node.js's, so -the number of people you're trusting is much lower. +the number of people you're trusting is much lower, but it's still +troublesome. Also, as a build tool, cargo can be very inflexible. Despite an official policy that cargo should be suitable for running inside -- 2.30.2