[juancampa]

Are there any working groups or teams in the rust foundation[0] looking into stuff like this? I know every package manager has these issues but there's no technical reason preventing us from building sandboxes (i.e. WASM, deno, ...) for this and making it a first class citizen of cargo/rustup/etc.

Just installing a relatively popular crate (say Hyper) makes you realize that all of your secret could have been stolen by any of the myriad of dependencies.

[0] https://www.rust-lang.org/governance

[comex]

Well, the topic has come up on the internals forum from time to time, e.g.:

https://internals.rust-lang.org/t/pre-rfc-procmacros-impleme...

I don’t think there’s an active working group though.