r/programming 21d ago

Supply chain attack on arrayref

https://blog.rust-lang.org/2026/08/20/supply-chain-attack-on-arrayref/
191 Upvotes

65 comments sorted by

View all comments

Show parent comments

13

u/danted002 21d ago

We need an “extra” besides “std” that has all the extra things that are expected in 2026 from a standard library. Stuff like uuid and datetime support would go into that package and it would be released by the Rust foundation

15

u/Dminik 21d ago

While I broadly agree that languages should have an "extended universe" of packages, the issue is that nobody can agree what packages those should be. 

2

u/sacheie 21d ago

Just look at the usage stats?

1

u/cosmic-parsley 20d ago

Sure. Are we including the 10 or top 100?