[twa10]

Project specific centralized package repositories have the danger of being political (see npm and others). There already is a CoC here that can be used against wrongthink or people you don't like:

https://crates.io/policies

These days, I prefer Linux distributions or BSD ports, though Homebrew seems to be pretty casual as well.

[ironmagma]

Cargo can handle dependencies linked via URL. Crates.io may be a moderated centralized database, but Cargo is just a neutral tool like make or Cabal.

[geodel]

I mean it is pretty simple. If one is not serving the cause of justice then they need to be brought to justice via social media.