Cargo is far better in this regard, for one. | Hacker News

Hacker Newsnew | past | comments | ask | show | jobs | submit

		eptcyka on July 12, 2018 \| parent \| context \| favorite \| on: ESLint compromised, may have stolen your credentia... Cargo is far better in this regard, for one.

Arnavion on July 12, 2018 [–]

Cargo packages can also execute arbitrary code at compile-time through build scripts, which run with full permissions of the original `cargo` command including filesystem and network access.

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact