Rust crates are trending towards way too many dependencies, like NPM packages. This increases the attack surface, decreases maintainability, and significantly increases the amount of time spent waiting for packages to build in CI/CD pipeilnes. Most of my compile time is twiddling my thumbs waiting for hundreds of extraneous transitives to finally finish compiling.

Request that crates.io begin downranking results by the number of dependencies, including transitives. Given the rustc compile time for a single crate is slow, this problem becomes exponential when consuming typical crates in the wild.

1 post - 1 participant

Read full topic