your daily reminder that npm and cargo are centralised databases and you can all get rugged
my suggestion, start using Go
Go uses DNS
DNS won't rug you as easily as microsoft and mozilla will
Discussion
I like Go's approach. It is similar to what I will be doing with my compilers package manager `tpkg`
your language sucks but at least you have sense about network security
DNS won't get rugged without abnormal levels of coordination, the kind that are required to break bitcoin
if USA fucks with IANA and dicks with the BIND roots they will be replicated by at least russia and china
it's far more secure, in terms of WW3 resistance
cargo and npm are a joke, i fjart in your general direction
you dumb... fucking,.. morons
DNS is more secure for the technically-adept and paranoid, like us, for sure.
Its still routinely locally poisoned by bad actors like the Australian government; and most people, even most devs, use their ISP's DNS server without any thought.
Needs more pubkey.
Need to normalise #tor and #i2p.
...should port golang DNS dependence onto blossom servers. code over relays FTW