Dependencies are a huge supply chain security risk; the more of them you have, and the more often you update, the bigger the attack surface.
  • BB_C
    1·
    15 days ago

    I will let you expand on this before responding to both:

    And also, cargo.toml has inconsistencies and double-standards.