Hacker News new | ask | show | jobs
by l33t7332273 756 days ago
Is security not a technical merit?
1 comments

It is but there are other technical and non-technical merits too. "Security" doesn't trump all. If you need secure, turn off your computer.

I tried Rust and downloaded some projects that should be comparatively simple (e.g. text editor). "cargo build" downloaded and built about 500 dependencies. The Rust ecosystem had a chance to convince me, and it sure has some convincing results. But it wasn't my cup of tea.

If you included hundreds of dependencies to do what you can't easily do yourself within the "safe" framework, that may or may not be the language's or the ecosystem's failure. But the attribute "secure" for such a project is questionable. As NPM history or a certain guy or the recent events around the xz project illustrate well.

`cargo-geiger` would like a word. Feel free to try it.

Number of dependencies is a bad signal for JS projects, I am not so sure the same applies for Rust however.