rust-lang/cargo
View on GitHub ↗ ★ 15,664 Rust
The Rust package manager
150 mentions on Hacker News by 99 people: 6 stories, 144 comments · first 2014-06-24 · latest 2026-10-01
20082026
-
you may still need + to forward the job server to other builder https://github.com/rust-lang/cargo/issues/14407
comment by aniceperson · 2026-10-01 · in Recursive `make` and `-j` -
Supply chain risks are essentially a solved problem. 1. Set a minimum age on dependencies: https://github.com/rust-lang/cargo/issues/15973 2. Scan all dependency code with AI Even if you don't do #2 yourself as long as anyone does in the…
comment by orlp · 2026-09-08 · in We have a year to fix security everywhere -
It's a pity that progress has been so slow. https://github.com/rust-lang/cargo/issues/17009
comment by killme2008 · 2026-08-20 · in Malicious Rust crate Arrayref runs a build-time payload -
…stabilize the feature is in its final comment period and currently expected to land in Rust 1.100: https://github.com/rust-lang/cargo/pull/17335#issuecomment-5...
comment by kibwen · 2026-08-20 · in Malicious Rust crate Arrayref runs a build-time payload -
…anything newer than 7 days old packages cargo feature for this is still unstable infuriatingly: https://github.com/rust-lang/cargo/issues/17009
comment by lyu07282 · 2026-08-20 · in Malicious Rust crate Arrayref runs a build-time payload -
…Cargo has `min-publish-age` in nightly, and it's currently heading towards stabilization: https://github.com/rust-lang/cargo/pull/17335
comment by faern · 2026-08-20 · in Malicious Rust crate Arrayref runs a build-time payload -
…and will warn about new install scripts (without executing them). There is an open issue for this: https://github.com/rust-lang/cargo/issues/13681
comment by praseodym · 2026-08-20 · in Malicious Rust crate Arrayref runs a build-time payload -
…that don't care about XDG. This 11 year old, open issue is very symptomatic of this IMHO: https://github.com/rust-lang/cargo/issues/1734
comment by mr_mitm · 2026-08-05 · in Pi's Minimalism Is Its Advantage -
The proposal's at https://hackmd.io/@rust-cargo-team/SJT-p_rL2 ; progress is tracked at https://github.com/rust-lang/cargo/issues/12633 .
comment by ameliaquining · 2026-07-16 · in How Our Rust-to-Zig Rewrite Is Going -
▲ 5
Show HN: An incremental build cache for Rust on GHAstory by a_t48 · 2026-07-15 · 0 comments
-
…measurements too. Would love built in coverage support but investigation is needed on the design ( https://github.com/rust-lang/cargo/issues/13040 ) and we likely need to redo how we handle doctests ( https://blog.rust-lang.org/inside-rust/…
comment by epage · 2025-12-28 · in Rust the Process -
…a dependency We want this on the Cargo team; somebody just needs to do the design work, see https://github.com/rust-lang/cargo/issues/3126 Note that there is a related problem of feature evolution. Can you take existing functionality and…
comment by epage · 2025-11-24 · in The Rust Performance Book (2020) -
…ttps://doc.rust-lang.org/nightly/cargo/guide/build-performa... We're coordinating the work on that at https://github.com/rust-lang/cargo/issues/16119 > > If you use dev builds but don’t often use a debugger, consider disabling debuginfo.…
comment by epage · 2025-11-24 · in The Rust Performance Book (2020) -
lib crates have been checking in their Cargo.lock for a while now. https://github.com/rust-lang/cargo/pull/12382
comment by the8472 · 2025-09-16 · in Shai-Hulud malware attack: Tinycolor and over 40 NPM packages compromised -
…mean? At the bottom of the page, the latest update is a pull request that was opened 10 days ago: https://github.com/rust-lang/cargo/pull/15684
comment by Expurple · 2025-06-30 · in Error handling in Rust -
True, but this is being worked on now: https://github.com/rust-lang/cargo/issues/14774
comment by Expurple · 2025-06-30 · in Error handling in Rust -
That work is being tracked in https://github.com/rust-lang/cargo/issues/5931 Someone has taken up the work on this though there are some foundational steps first. 1. We need to delineate intermediate and final build artifacts so people…
comment by epage · 2025-06-12 · in Rust compiler performance -
…in Rust 1.88 (currently on the beta channel, will become the new stable release in two weeks): https://github.com/rust-lang/cargo/issues/12633 *EDIT: For now this only deletes old cached downloads, not build artifacts. Thanks epage for the…
comment by mbrubeck · 2025-06-12 · in Rust compiler performance -
…https://doc.rust-lang.org/cargo/reference/build-cache.html We are working on making this clearer with https://github.com/rust-lang/cargo/issues/14125 where there will be `build.build-dir` (intermediate files) and `build.target-dir` (final…
comment by epage · 2025-06-02 · in Reducing Cargo target directory size with -Zno-embed-metadata -
See https://github.com/rust-lang/cargo/issues/13897#issue-228884... and https://github.com/rust-lang/cargo/issues/13897#issuecomment... .
comment by 0rzech · 2025-03-26 · in Malware found on NPM infecting local package with reverse shell -
…and the web-config tool and the man page generator (both written in python). Our issue for this is https://github.com/rust-lang/cargo/issues/2729 Personally, I lean away from Cargo expanding into these use cases and prefer another tool…
comment by epage · 2024-12-29 · in Fish 4.0: The Fish of Theseus -
…application or app store. If you don't believe me, read that thread, and the linked thread. [1] - https://github.com/rust-lang/cargo/issues/13994#issuecomment...
comment by wokwokwok · 2024-10-29 · in Show HN: Marmite – Zero-config static site generator -
Just look at the proposal to add an --only-dependencies flag to cargo-build. https://github.com/rust-lang/cargo/issues/2644 Its a clusterfuck of people misdirecting the discussion, the maintainers completely missing the point, and in the…
comment by lionkor · 2024-09-26 · in Rewriting Rust -
Work, is being done, though: https://github.com/rust-lang/cargo/issues/13873 .
comment by afdbcreid · 2024-09-09 · in Comfy, the 2D rust game engine, is now archived -
…is a roulette of "did this tiny package update before everyone in the dependency tree noticed" [0]: https://github.com/rust-lang/cargo/issues/7169
comment by Starlevel004 · 2024-09-09 · in Comfy, the 2D rust game engine, is now archived -
…I just noticed this major problem". As an example of these is a recent PR of mine against Cargo: https://github.com/rust-lang/cargo/pull/14239 In particular, the refactors leading up to the final change made it so the actual fix was a one…
comment by epage · 2024-07-13 · in Things I know about Git commits -
▲ 1
crates-io 0.32.0 (accidentally) downgraded and published again as 0.31.1? (2020)story by transpute · 2024-05-28 · 0 comments
-
…titled "cargo vendor-related questions asked by the community" [2] of related conversations. [1]: https://github.com/rust-lang/cargo/issues/7520 [2]: https://github.com/rust-lang/cargo/issues/7520#issuecomment-...
comment by xpe · 2024-03-26 · in Tech Debt: My Rust Library Is Now a CDO -
▲ 2
Cargo Scriptstory by jcbhmr · 2024-02-26 · 1 comment
-
…back then to use cargo to pull in some dependencies? The clean solution of cargo script is here: https://github.com/rust-lang/cargo/issues/12207 Following the links, the RFC contains a nice list of similar tools:…
comment by qznc · 2024-02-07 · in Scriptisto: "Shebang interpreter" that enables writing scripts in compiled langs -
…a part of Rust 1.77.0 and it will release on 21st March. I say that because of the tag in the PR ( https://github.com/rust-lang/cargo/pull/13257#event-11505613... ). I'm no expert on Rust compiler development, but my understanding is that…
comment by nindalf · 2024-01-24 · in Making Rust binaries smaller by default -
…for putting the effort in! I noticed a very tiny typo which doesn't affect behaviour I think. https://github.com/rust-lang/cargo/pull/13257/files#r1464506...
comment by afraca · 2024-01-24 · in Making Rust binaries smaller by default -
…about how much free software sucks. [0]: https://github.com/rust-lang/rustfmt/issues/3347 [1]: https://github.com/rust-lang/cargo/pull/10344 [2]: https://github.com/rust-lang/cargo/commit/3842d8e6f20067f716...
comment by shepherdjerred · 2023-12-28 · in You can't do that because I hate you -
…want it and so that someone can decide to implement it. That message *could* be updated to point to https://github.com/rust-lang/cargo/issues/10310 instead of asking for new issues to be created or suggesting the old `cargo-vendor`. (The…
comment by Arnavion · 2023-12-28 · in You can't do that because I hate you -
You heard wrong? https://github.com/rust-lang/cargo
comment by Georgelemental · 2023-12-05 · in State of Mozilla -
…is still a bit half-assed -- I mean, take a look at this terminally open but rather critical issue: https://github.com/rust-lang/cargo/issues/3946 ; our $work source tree is littered with brittle hardcoded relative paths because of this…
comment by cmrdporcupine · 2023-11-22 · in I think C++ is still a desirable coding platform compared to Rust -
And we'd like to have native support for these in cargo: https://github.com/rust-lang/cargo/issues/10881
comment by epage · 2023-09-07 · in Semver violations are common, better tooling is the answer -
…might have been merged but (as you'll find out if you read through all of these) it isn't stable. https://github.com/rust-lang/cargo/issues/8147 https://github.com/rust-lang/cargo/issues/3349 https://github.com/rust-lang/cargo/pull/9322…
comment by saurik · 2023-08-26 · in Leaving Haskell behind -
I actually agree, yet it still has shortcomings. For eg https://github.com/rust-lang/cargo/issues/545 is still open (it's from 2014!!)
comment by nextaccountic · 2023-08-09 · in PackagingCon – A conference only for software package management -
…`cargo new`/`cargo init`. #12069 [1] imo I think this is a big quality of life improvement [0] https://github.com/rust-lang/cargo/blob/master/CHANGELOG.md#... [1] https://github.com/rust-lang/cargo/pull/12069
comment by epage · 2023-07-13 · in Rust 1.71.0 -
You're probably running into this: https://github.com/rust-lang/cargo/issues/7058 `cargo vendor` will download dependencies and dev dependencies for all platforms, which leads to a lot of unused code being pulled in. In this case, the…
comment by jeroenhd · 2023-06-28 · in Testing the memory safe Rust implementation of Sudo/Su -
…more than a year ago. Originally, it was pretty much only compilation artifacts and some CLI. https://github.com/rust-lang/cargo/pull/10563
comment by drewtato · 2023-06-09 · in Rust module system encourages bad practices -
…to build them as well to actually get good performance. This is the upstream issue in question: https://github.com/rust-lang/cargo/issues/2644 Cargo fetch and/or cargo-chef kind of does these things, but not in a super intuitive and easy…
comment by kjuulh · 2023-06-08 · in Rust module system encourages bad practices -
…more meant for binaries [2] [0] https://doc.rust-lang.org/cargo/reference/workspaces.html#th... [1] https://github.com/rust-lang/cargo/pull/12069 [2] https://github.com/rust-lang/rfcs/pull/3424
comment by epage · 2023-06-08 · in Rust module system encourages bad practices -
…and the processes the core team and developers have set up. I am curious though what about https://github.com/rust-lang/cargo/pull/11285/files actually caused the resulting bug. I mean conceptually I get it, but it'd be neat to see some…
comment by coderintherye · 2023-05-02 · in Postmortem Analysis in Cargo -
…for every project. Would be much nicer if they put the cache one .cache But they don't seem to care https://github.com/rust-lang/cargo/issues/1734 https://github.com/rust-lang/rfcs/pull/1615 https://github.com/rust-lang/cargo/pull/9178
comment by jenadine · 2023-03-24 · in Use the XDG Base Directory Specification -
▲ 1
'sparse' is now the default protocol for crates.iostory by killcoder · 2023-03-06 · 0 comments
-
Cargo is hard-coded to use GitHub for the crates.io index [1] [1] https://github.com/rust-lang/cargo/blob/master/src/cargo/sou...
comment by VWWHFSfQ · 2023-03-01 · in GitHub Packages Is Down