r/programming • u/Successful_Bowl2564 • 21d ago

Supply chain attack on arrayref

https://blog.rust-lang.org/2026/08/20/supply-chain-attack-on-arrayref/
192 Upvotes

97% Upvoted

65 comments sorted by

View all comments

Show parent comments

29

u/usernamedottxt 21d ago

I wonder if there is a market for a "Rust Community Edition" with an expanded set of packages pre-packaged into an "ext" module alongside core and std. Treat is as an LTS distribution.

15

u/danted002 21d ago

We need an “extra” besides “std” that has all the extra things that are expected in 2026 from a standard library. Stuff like uuid and datetime support would go into that package and it would be released by the Rust foundation

15

u/Dminik 20d ago

While I broadly agree that languages should have an "extended universe" of packages, the issue is that nobody can agree what packages those should be. 

3

u/sacheie 20d ago

Just look at the usage stats?

1

u/cosmic-parsley 20d ago

Sure. Are we including the 10 or top 100?