[easytiger]

> The default behavior of cargo is to download stuff from the internet. This may be the least reproducible thing ever.

Wait till you find out about java ecosystems

I know investment bank dev teams pulling whatever they need from maven central with no oversight or introspection.

[DrBazza]

Log4j joins the conversation.

[easytiger]

yea i'm glad i wasn't around when that was discovered.