codeinabox@programming.dev to Programming@programming.devEnglish · 1 day agoEvery dependency you add is a supply chain attack waiting to happenbenhoyt.comexternal-linkmessage-square18fedilinkarrow-up1131arrow-down10
arrow-up1131arrow-down1external-linkEvery dependency you add is a supply chain attack waiting to happenbenhoyt.comcodeinabox@programming.dev to Programming@programming.devEnglish · 1 day agomessage-square18fedilink
minus-squareMonkderVierte@lemmy.ziplinkfedilinkarrow-up4·12 hours agoSoo, how do i build Rust packages without Cargo?
minus-squareBB_C@programming.devlinkfedilinkarrow-up1·55 minutes agoWhy do you think cargo is a problem?
minus-squareTehPers@beehaw.orglinkfedilinkEnglisharrow-up4·8 hours agoYou can run rustc directly! You just need to pass about 30 different parameters to it as well as a list of all the dependencies you use and… Look, it works for small projects.
minus-squareMonkderVierte@lemmy.ziplinkfedilinkarrow-up1·8 hours agoSo i could theoretically script a wrapper?
minus-squareTehPers@beehaw.orglinkfedilinkEnglisharrow-up3·8 hours agoI don’t see why not. Cargo is fundamentally just a fancy wrapper around rustc, anyway. Sure, it’s a really fancy wrapper that does a lot of stuff but it’s entirely possible to just call rustc yourself.
Soo, how do i build Rust packages without Cargo?
Why do you think cargo is a problem?
You can run rustc directly! You just need to pass about 30 different parameters to it as well as a list of all the dependencies you use and…
Look, it works for small projects.
So i could theoretically script a wrapper?
I don’t see why not. Cargo is fundamentally just a fancy wrapper around rustc, anyway. Sure, it’s a really fancy wrapper that does a lot of stuff but it’s entirely possible to just call rustc yourself.