Comment by nineteen999

At risk like node/npm with all the supply-chain attacks then?

Or is there something that cargo does to manage it differently (due diligence?).