Edit: old post is someone is curious: https://dev.to/jamilxt/electron-vs-gpui-what-discords-290-mb-rust-rewrite-can-and-cannot-prove-34b6
Replaced with the one from The Verge
Edit: old post is someone is curious: https://dev.to/jamilxt/electron-vs-gpui-what-discords-290-mb-rust-rewrite-can-and-cannot-prove-34b6
Replaced with the one from The Verge
Yeah. Npm definitively is safer than cargo /s.
Any non-retarded company would just verify that their dependencies are secure. And then self-host their own cargo repo to avoid supply chain attacks.
This is a company issue, not a language issue. And if it were a language issue, JavaScript would be worse anyway.