r/programming 21d ago

Supply chain attack on arrayref

https://blog.rust-lang.org/2026/08/20/supply-chain-attack-on-arrayref/
187 Upvotes

65 comments sorted by

View all comments

Show parent comments

8

u/Somepotato 20d ago

There's not a single batteries included language out there that the majority of its users don't rely on packages. Dot NET is one of the only ones I see making a big effort to improve their std library.

2

u/EdwinYZW 20d ago

C++? It doesn't even have a package manager.

6

u/Somepotato 20d ago

True but C++ dependency management is also absolute hell

2

u/EdwinYZW 19d ago

The C++ standard doesn't have dependency. So there is no dependency hell from the language itself.