Updated Thoughts on Trust Scaling

1 · Armin Ronacher · July 29, 2019, midnight
A few years back I wrote down my thoughts on the problem of micropackages and trust scaling. In the meantime the problem has only gotten worse. Unfortunately my favorite programming language Rust is also starting to suffer from dependency explosion and how risky dependencies have become. Since I wrote about this last I have learned a few more things about this and I have some new ideas of how this could potentially be managed. The Problem Summarized Every dependency comes with a cost. It pu...