Serde, a popular Rust (de)serialization project, has decided to ship its serde_derive macro as a precompiled binary. This has generated a fair amount of concern among some developers who highlight the future legal and technical issues this may pose, along with a potential for supply chain attacks.
They’re related. I was merely adding context here, because the comment only said it is related, but not how. (Hence why I put the supposed question in italics.) The context I would have liked to immediately know if I want to follow the link or not.
Ah, I see now what you meant. I thought you were being sarcastic due to the italics, my bad!