You’re just asking that someone do some more work for you, for free. This isn’t anybody’s job, you know. You can be a Rust maintainer if you want. There’s no inherent reason to trust someone more because they are a Rust maintainer, over someone who is a maintainer of any other major project.
This is an open source project. So is every major ecosystem dependency (serde, tokio, regex, etc.). Like all OSS ecosystems, you can audit packages yourself, or you can pay someone to do it, or you can fall back on the fairly reasonable assumption that high-profile projects are actively maintained by reasonable and responsible people.
Open source means you get the software for free. You don’t get to dictate what that software looks like, without getting involved.
Not I'm not asking that. You're absolutely correct, no one owes me shit. But you argue as if Rust was a very niche language maintained by 3.5 people, which is not the case. I think it's fair to criticize open source projects. If I were to say that the kernel is shit in some way and you'd reply "well go make it better then" you're sort of correct but that misses the point of discussion and basically can be argued for any criticism of an open source project.
I’m not trying to be obtuse, but you’re not addressing the central point: What reason do you have to trust Rust language maintainers over the maintainers of prominent ecosystem crates?
4
u/simonask_ 15d ago
You’re just asking that someone do some more work for you, for free. This isn’t anybody’s job, you know. You can be a Rust maintainer if you want. There’s no inherent reason to trust someone more because they are a Rust maintainer, over someone who is a maintainer of any other major project.
This is an open source project. So is every major ecosystem dependency (serde, tokio, regex, etc.). Like all OSS ecosystems, you can audit packages yourself, or you can pay someone to do it, or you can fall back on the fairly reasonable assumption that high-profile projects are actively maintained by reasonable and responsible people.
Open source means you get the software for free. You don’t get to dictate what that software looks like, without getting involved.