Comment

Comment by bayindirh

Currently vendoring all of the dependencies for Rust implementation pulls in 1.75 million SLOC, which I find amusing.

This is a lot of SLOC, and a huge surface area to pull targeted supply-chain attacks, IMO.

P.S.: I know you don't compile in all of this into the binary, yet consider the eyes and work hours required to verify that the whole chain is sane and safe.

This is how it looks:

    vagrant@rust-playground:~/development/sudo-rs$ cloc .
        3549 text files.
        3271 unique files.                                          
         453 files ignored.
    
    1 error:
    Line count, exceeded timeout:  ./vendor/proc-macro2/src/parse.rs
    
    github.com/AlDanial/cloc v 1.86  T=9.67 s (320.2 files/s, 208065.8 lines/s)
    --------------------------------------------------------------------------------
    Language                      files          blank        comment           code
    --------------------------------------------------------------------------------
    Rust                           2637          49276         111413        1754298
    diff                              2            884          32618          35892
    Markdown                        182           4903              9          13341
    TOML                            137            807           1073           5734
    Assembly                          8             90             71           1244
    YAML                              5             80             26            393
    JSON                            106              0              0            120
    reStructuredText                  1             70              4             90
    C/C++ Header                      9              5              2             79
    Bourne Shell                      5             14             17             64
    C                                 2              6              6             46
    Bourne Again Shell                2              7              8             41
    Python                            1             17             19             38
    Dockerfile                        1              0              0              2
    --------------------------------------------------------------------------------
    SUM:                           3098          56159         145266        1811382
    --------------------------------------------------------------------------------
parent bayindirh 3 years ago

Discussion

Live from the official Hacker News API

A modern reader for Hacker News · SvelteKit + Skeleton