Topics
Follow your own topics →
DIFF.BLOG
New Following Discover Jobs
More
Top Writers Suggest a blog Upvotes plugin
Report bug Contact About
Sign up
Menu
New Following Discover Jobs Top Writers
More
Suggest a blog Upvotes plugin Report bug Contact About
Sign up
The home for great developer writing.
Discover the best posts from developers and engineering teams, all in one place.
Join now → Learn more
TOPICS

Self Download vs. Certified Crates?

104 · Users Rust Lang · June 10, 2026, 6:55 p.m.
Rust Programming dependency management supply chain security software development
Summary
The blog post discusses the advantages and choices between using certified crates for dependency management versus self-downloaded crates in Rust, particularly in the context of supply chain security and the effectiveness of tools like Redhat Quarkus Build and Ferrous Systems’ Ferrocene.
Read full post on users.rust-lang.org →
MORE POSTS LIKE THIS
CPUX - retained-mode GUI framework
Users Rust Lang · Jul 1, 2026
GUI Frameworks Rust Programming
Why you should use Fromager to build your Python dependency trees from source
Red Hat · Jun 25, 2026
Python dependency management
What has (can) the EU Cyber Resilience Act done (do) for you?
Bsdly Blogspot · Jun 19, 2026
EU Cyber Resilience Act software-engineering
Caveats around using Libyears
Jamie Tanna · May 14, 2026
Libyear dependency management
Library dependency version specifiers aren't for fixing vulnerabilities
cclauss · May 7, 2026
dependency management software development
A GitHub for maintainers
Andrew Nesbitt · May 2, 2026
github Open Source
Discover more posts →
AUTHOR
RECENT POSTS FROM THE AUTHOR
Choose how you want to continue.
Continue with GitHub Continue with Google