serde_derive now ships a precompiled binary. This made a lot of people angry. The crate maintainer finally locked the issue.
serde_derive now ships a precompiled binary. This made a lot of people angry. The crate maintainer finally locked the issue.
One of the main reasons would be to try and hide what’s in it
If, for example, you wanted to add tracking code into the generated code, and knew people would stop using your product if they found out
Is there anything confirmed yet? Like what is inside this precompiled binary?
As far as I know, no one has yet been able to reproduce the binary with the source code, so I don’t think the contents of it are confirmed at all.
Tracking bullshit is very easy to find. Check for networking syscalls and done.