Top all-time · #15674
Adam Harvey
Personal blog · lawngno.me/blogprogrammingsecurity
Adam Harvey writes Gnome home, a personal blog at lawngno.me about programming and security. Since 2024, 5 different Hacker News readers have linked it 5 times, most often “Testing provenance of popular Rust crates against their upstream repositories”. It is still writing: the last post was on 2025-03-06, and you can follow it by feed.
Too few sampled comments (2) to say how often HN recommends it.?
Why HN links it
Linked in threads on package managers and Rust supply-chain security, where commenters discuss the benefits and risks of pulling in shared third-party crates. None of the comments judge the writing itself.
Summarised by Claude from a sample of 2 HN comments that link here. Each comment is marked recommending, critical or neutral (citing without judging); how this works.
Various musings of Adam Harvey.
Most-linked posts?
- Testing provenance of popular Rust crates against their upstream repositories5 people · 5 mentions · first linked 2024-06-11
What Hacker News says?
I wouldn't say I'm a dependency maximalist but it not far off. Yes, shared code has costs - more general than you likely need, affecting complexity, compile times, etc - comes with risks for today (code) and the future (governace) But the benefits are big. My theory for one of the causes for Rust having so many good cli's is Cargo because it keeps the friction low for pulling in high quality building blocks so you c…
Comment linking /blog/2024/06/10/divine-provenance.html
on “A critique of package managers”Submitted Testing provenance of popular Rust crates against their upstream repositories as a story · 2 points
HN discussion> Let me rephrase this, 17% of the most popular Rust packages contain code that virtually nobody knows what it does (I can't imagine about the long tail which receives less attention). I dug into the linked article, and I would really say this means something closer to 17% of the most popular Rust package versions are either unbuildable or have some weird quirks that make building them not work the way you expect, a…
Comment linking /blog/2024/06/10/divine-provenance.html
on “Supply chain nightmare: How Rust will be attacked and what we can do to mitigate”Submitted Crates of Rust on the Wall as a story · 2 points
HN discussionSubmitted Testing Provenance of the 999 most popular Rust crates as a story · 1 points
HN discussion