On: Backdoor in upstream xz/liblzma leading to SSH server compromise

[intelVISA]

Modern coders have been conditioned to import random libs to save 30mins work.

[joshhansen → intelVISA]

Rust specifically chose a minimal standard library to not get stuck with the Python "dead batteries" problem. There's a strong culture as well of minimizing a project's dependencies in Rust.

[account42 → joshhansen]

> Rust specifically chose a minimal standard library to not get stuck with the Python "dead batteries" problem.

So has C++ in the past although there seems to be a push for a more batteries included approach recently.

> There's a strong culture as well of minimizing a project's dependencies in Rust.

This doesn't match what anyone can observe by looking at dependencies of Rust projects.