It’s a bit of a mixed bag for me to be honest. I understand the desire to accurately package dependencies and maintain control over the dependencies without relying on a third party host, but I feel like everyone (whether that’s rust, node, python, ruby, etc) should just maintain a separate registry. As in not package it in the “Debian repos” but a debian mirror of crates.io that the debian maintainers maintain. To whit I can just download the Debian rust toolchain and have it be pointing at the Debian rust package mirror.

I’m sure there’s a lot of extra infra required for something like that, but I genuinely believe it’s more sane to try and get these languages to adopt that, rather than what we have now.

I could be easily swayed another way, but that’s how I feel currently.