Serde, a popular Rust (de)serialization project, has decided to ship its serde_derive macro as a precompiled binary. This has generated a fair amount of concern among some developers who highlight the future legal and technical issues this may pose, along with a potential for supply chain attacks.
Related: https://programming.dev/post/1851005
Related how?
Linked post title: What is going on with serde?
If you read the linked post there you’ll see that it’s about devs discussing Serde’s actions on the GH issue. How are they not related?
They’re related. I was merely adding context here, because the comment only said it is related, but not how. (Hence why I put the supposed question in italics.) The context I would have liked to immediately know if I want to follow the link or not.
Ah, I see now what you meant. I thought you were being sarcastic due to the italics, my bad!