{"slug": "cargo", "name": "Cargo", "category": "dev-libs", "category_name": "Libraries and frameworks", "description": "Rust's official build system and package manager.", "recommenders": 9, "commenters": 13, "warners": 3, "score": 5.405, "rising": -0.29, "first": "2025-12-06", "latest": "2026-10-07", "why": "HN commenters like Cargo for unifying Rust's build tooling and for easy dependency management that compares well with other languages' tools.", "why_is_quote": false, "has_verdict": true, "sentiment": {"recommend": 9, "neutral": 1, "compare": 0, "warn": 3}, "spark": [0, 2, 1, 2, 0, 1, 0, 1, 0, 1, 0, 1], "listed": true, "loved": ["Easy dependencies", "Unified ecosystem"], "caveat": "Supply chain security", "short_quote": "I love that cargo unifies the ecosystem, no quabble over one shitty build tool over another.", "icon": true, "domain": null, "github_repo": null, "official_url": "https://doc.rust-lang.org/cargo/", "pricing": "open source", "aliases": ["Cargo"], "verdict": [{"text": "HN commenters like Cargo for unifying Rust's build tooling", "cites": [{"id": 755084112, "item_id": 47192757, "url": "https://news.ycombinator.com/item?id=47192757", "by": "ysleepy", "date": "2026-02-28", "stance": "recommend", "quote": "I love that cargo unifies the ecosystem, no quabble over one shitty build tool over another.", "excerpt": "Rust does not have the best tooling by far imo. The IDE capabilities are not nearly as advanced as they are for Java for example. Compared to C/C++ or dynamically typed languages, sure. I love that cargo unifies the ecosystem, no quabble over one shitty build tool over another. I feel like the IDE story still has a long way to go.", "context": "", "use_case": "Rust build tool", "switched_from": "", "story": "Rust Is Just a Tool"}, {"id": 787911216, "item_id": 49244451, "url": "https://news.ycombinator.com/item?id=49244451", "by": "ch4s3", "date": "2026-08-10", "stance": "recommend", "quote": "cargo as a tool beats any language tooling for any language with similar breadth", "excerpt": "Agreed, rust is SUPER not fun IMHO but I use it a lot via FFI for things I wouldn't do in Elixir which I prefer to write/read. The broad array of well built tools on cargo is just so hard to compete with, and cargo as a tool beats any language tooling for any language with similar breadth. The JVM has every tool imaginable but I'd rather built it myself than tangle with JVM tooling.", "context": "", "use_case": "Rust build and package tooling", "switched_from": "", "story": "Because It's Not Fun Enough: why languages fail"}]}, {"text": " and for easy dependency management that compares well with other languages' tools.", "cites": [{"id": 775709408, "item_id": 48481838, "url": "https://news.ycombinator.com/item?id=48481838", "by": "berkes", "date": "2026-06-10", "stance": "recommend", "quote": "lacking OOTB, common and easy dependency management like cargo", "excerpt": "Probably my reference is tainting this then. I come from Perl, PHP (both of which, at that time, had nonexisting or terrible package managing - CPAN, PEAR), then Ruby, with gems and now Python, Typescript/Javascript. Starting with Ruby, I've developed in communities that heavily depend on deep dependency trees. For me, the discipline of shallow dependencies, no-dependencies etc, was new when I came to rust. Sure, if ", "context": "Developer with a Perl, PHP, Ruby, Python and JS background", "use_case": "Rust dependency management", "switched_from": "", "story": "Show HN: Gitdot \u2013 a better GitHub. Open-source, anti-AI, and written in Rust"}, {"id": 763567984, "item_id": 47722999, "url": "https://news.ycombinator.com/item?id=47722999", "by": "gwbas1c", "date": "2026-04-10", "stance": "recommend", "quote": "I also like Cargo better than Nuget, but that's a very subjective opinion.", "excerpt": "Regarding tradeoffs: I've been working with C# for most of my career, almost 25 years, since .Net 1.0. One of the huge things that I love about Rust is the lack of a runtime framework. I don't need to figure out how to bundle / ship / install a framework at runtime. (I also like Cargo better than Nuget, but that's a very subjective opinion.) Which leads to probably the biggest tradeoff: > Typhon is an embedded... It'", "context": "C# developer for ~25 years", "use_case": "package management", "switched_from": "", "story": "Why I'm Building a Database Engine in C#"}, {"id": 738868385, "item_id": 46179274, "url": "https://news.ycombinator.com/item?id=46179274", "by": "oconnor663", "date": "2025-12-06", "stance": "recommend", "quote": "Cargo has really spoiled me.", "excerpt": "> We recommend using Nix to easily ensure you are running the right versions of the tools and libraries. Ooof I remember when everything used to be like this. Cargo has really spoiled me.", "context": "", "use_case": "Rust build and dependencies", "switched_from": "", "story": "Eurydice: a Rust to C compiler"}]}, {"text": " The most common complaint is supply chain risk,", "cites": [{"id": 740046128, "item_id": 46252883, "url": "https://news.ycombinator.com/item?id=46252883", "by": "uecker", "date": "2025-12-12", "stance": "warn", "quote": "The cargo supply chain issues are also very obvious, I am far more worried about this than I ever will be about memory safety", "excerpt": "The distribution I use already has limited security updates for Rust: https://www.debian.org/releases/trixie/release-notes/issues.en.html#go-and-rust-based-packages which reduces my security. The cargo supply chain issues are also very obvious, I am far more worried about this than I ever will be about memory safety, but hopefully tor reduces its reliance on random dependencies.", "context": "Debian user", "use_case": "Rust package management", "switched_from": "", "story": "The Tor Project is switching to Rust"}, {"id": 789981024, "item_id": 49373814, "url": "https://news.ycombinator.com/item?id=49373814", "by": "praseodym", "date": "2026-08-20", "stance": "warn", "quote": "Cargo doesn\u2019t have security controls in place to prevent these kinds of attacks", "excerpt": "Unfortunately Cargo doesn\u2019t have security controls in place to prevent these kinds of attacks. For example pnpm has controls to allowlist install scripts for dependencies and will warn about new install scripts (without executing them). There is an open issue for this: https://github.com/rust-lang/cargo/issues/13681", "context": "", "use_case": "Rust package management", "switched_from": "", "story": "Supply Chain Attack on Arrayref"}]}, {"text": " since it lacks controls such as install-script allowlists", "cites": [{"id": 789981024, "item_id": 49373814, "url": "https://news.ycombinator.com/item?id=49373814", "by": "praseodym", "date": "2026-08-20", "stance": "warn", "quote": "Cargo doesn\u2019t have security controls in place to prevent these kinds of attacks", "excerpt": "Unfortunately Cargo doesn\u2019t have security controls in place to prevent these kinds of attacks. For example pnpm has controls to allowlist install scripts for dependencies and will warn about new install scripts (without executing them). There is an open issue for this: https://github.com/rust-lang/cargo/issues/13681", "context": "", "use_case": "Rust package management", "switched_from": "", "story": "Supply Chain Attack on Arrayref"}]}, {"text": " and pushes users toward npm-like dependency sprawl.", "cites": [{"id": 794544000, "item_id": 49659000, "url": "https://news.ycombinator.com/item?id=49659000", "by": "throwaway273748", "date": "2026-09-11", "stance": "warn", "quote": "Cargo is a shitshow and Rust forces you into an npm-like experience", "excerpt": "This is giving real \"if all you have is a hammer\" vibes. I also have years of experience with Rust, but I moved off Rust a few years back simply because I'm sick of the anemic stdlib and lack of mature ecosystem around anything even one inch off the beaten path. Cargo is a shitshow and Rust forces you into an npm-like experience for a whole bunch of functionality that ought to be included in the box. You're juggling ", "context": "years of Rust experience, moved off Rust", "use_case": "Rust package management", "switched_from": "", "story": "Rust is tier-1 language at Microsoft"}]}], "praise": [{"label": "Easy dependencies", "summary": "Dependency management is seen as easy and better than older or rival package managers.", "quotes": [{"id": 775709408, "item_id": 48481838, "url": "https://news.ycombinator.com/item?id=48481838", "by": "berkes", "date": "2026-06-10", "stance": "recommend", "quote": "lacking OOTB, common and easy dependency management like cargo", "excerpt": "Probably my reference is tainting this then. I come from Perl, PHP (both of which, at that time, had nonexisting or terrible package managing - CPAN, PEAR), then Ruby, with gems and now Python, Typescript/Javascript. Starting with Ruby, I've developed in communities that heavily depend on deep dependency trees. For me, the discipline of shallow dependencies, no-dependencies etc, was new when I came to rust. Sure, if ", "context": "Developer with a Perl, PHP, Ruby, Python and JS background", "use_case": "Rust dependency management", "switched_from": "", "story": "Show HN: Gitdot \u2013 a better GitHub. Open-source, anti-AI, and written in Rust"}, {"id": 738868385, "item_id": 46179274, "url": "https://news.ycombinator.com/item?id=46179274", "by": "oconnor663", "date": "2025-12-06", "stance": "recommend", "quote": "Cargo has really spoiled me.", "excerpt": "> We recommend using Nix to easily ensure you are running the right versions of the tools and libraries. Ooof I remember when everything used to be like this. Cargo has really spoiled me.", "context": "", "use_case": "Rust build and dependencies", "switched_from": "", "story": "Eurydice: a Rust to C compiler"}, {"id": 763567984, "item_id": 47722999, "url": "https://news.ycombinator.com/item?id=47722999", "by": "gwbas1c", "date": "2026-04-10", "stance": "recommend", "quote": "I also like Cargo better than Nuget, but that's a very subjective opinion.", "excerpt": "Regarding tradeoffs: I've been working with C# for most of my career, almost 25 years, since .Net 1.0. One of the huge things that I love about Rust is the lack of a runtime framework. I don't need to figure out how to bundle / ship / install a framework at runtime. (I also like Cargo better than Nuget, but that's a very subjective opinion.) Which leads to probably the biggest tradeoff: > Typhon is an embedded... It'", "context": "C# developer for ~25 years", "use_case": "package management", "switched_from": "", "story": "Why I'm Building a Database Engine in C#"}]}, {"label": "Unified ecosystem", "summary": "One standard tool unifies the ecosystem and gives broad, well-built tooling.", "quotes": [{"id": 755084112, "item_id": 47192757, "url": "https://news.ycombinator.com/item?id=47192757", "by": "ysleepy", "date": "2026-02-28", "stance": "recommend", "quote": "I love that cargo unifies the ecosystem, no quabble over one shitty build tool over another.", "excerpt": "Rust does not have the best tooling by far imo. The IDE capabilities are not nearly as advanced as they are for Java for example. Compared to C/C++ or dynamically typed languages, sure. I love that cargo unifies the ecosystem, no quabble over one shitty build tool over another. I feel like the IDE story still has a long way to go.", "context": "", "use_case": "Rust build tool", "switched_from": "", "story": "Rust Is Just a Tool"}, {"id": 787911216, "item_id": 49244451, "url": "https://news.ycombinator.com/item?id=49244451", "by": "ch4s3", "date": "2026-08-10", "stance": "recommend", "quote": "cargo as a tool beats any language tooling for any language with similar breadth", "excerpt": "Agreed, rust is SUPER not fun IMHO but I use it a lot via FFI for things I wouldn't do in Elixir which I prefer to write/read. The broad array of well built tools on cargo is just so hard to compete with, and cargo as a tool beats any language tooling for any language with similar breadth. The JVM has every tool imaginable but I'd rather built it myself than tangle with JVM tooling.", "context": "", "use_case": "Rust build and package tooling", "switched_from": "", "story": "Because It's Not Fun Enough: why languages fail"}, {"id": 738972034, "item_id": 46185752, "url": "https://news.ycombinator.com/item?id=46185752", "by": "wonklebonkle", "date": "2025-12-07", "stance": "recommend", "quote": "In Iced you write in Rust and use Cargo packages. This gives the developer ultimate composability", "excerpt": "Iced is a wonderful dead-simple framework. I hope it forever maintains the simplicity which combines nicely with Rust\u2019s features. One thing I love about Iced and miss in Qt is writing the software in a single language. Qt has chosen to introduce multiple languages into their framework which makes the entire codebase a huge learning curve. In Qt you write your display layer in QML then your UI logic in Javascript and ", "context": "", "use_case": "Rust package management", "switched_from": "", "story": "Iced 0.14 has been released (Rust GUI library)"}]}, {"label": "Workspaces", "summary": "Workspaces help split packages for build speed and versioning, with shared manifest settings.", "quotes": [{"id": 747851184, "item_id": 46740699, "url": "https://news.ycombinator.com/item?id=46740699", "by": "epage", "date": "2026-01-23", "stance": "recommend", "quote": "Cargo workspaces allow for sharing parts of the manifest through \"workspace inheritance\"", "excerpt": "In Rust, we use workspaces for - splitting up a package into smaller compilation units to speed up builds as llvm doesn't like large compilation units, e.g. I'm assuming this is why uv is split up - splitting semver concerns (easiest if different parts of the api are versioned independently), e.g. one hope for splitting out `serde_core` is to allow breaking changes of `serde_derive` - splitting out optional parts to ", "context": "Rust developer", "use_case": "Rust workspaces", "switched_from": "", "story": "Workspaces and Monorepos in Package Managers"}]}, {"label": "Transparent supply chain", "summary": "One commenter argues its standardized, explicit dependency handling is more transparent than manual alternatives.", "quotes": [{"id": 799801232, "item_id": 49987577, "url": "https://news.ycombinator.com/item?id=49987577", "by": "eviks", "date": "2026-10-07", "stance": "recommend", "quote": "How is your manual alternative to manage supply chain any better than this explicit one where transparency is standardised?", "excerpt": "> any use of Cargo to download dependencies dramatically increases supply chain security risk. > Currently the best solution is to not use programming language package managers, but GNOME\u2019s Rust code depends heavily on Cargo. That's what an ostrich would say. How is your manual alternative to manage supply chain any better than this explicit one where transparency is standardised? > I don\u2019t want to downplay the sever", "context": "", "use_case": "Rust dependency management", "switched_from": "", "story": "The era of software quality, or the era of ostriches?"}]}], "caveats": [{"label": "Supply chain security", "summary": "Commenters worry about supply chain attacks and missing controls like install-script allowlists.", "quotes": [{"id": 789981024, "item_id": 49373814, "url": "https://news.ycombinator.com/item?id=49373814", "by": "praseodym", "date": "2026-08-20", "stance": "warn", "quote": "Cargo doesn\u2019t have security controls in place to prevent these kinds of attacks", "excerpt": "Unfortunately Cargo doesn\u2019t have security controls in place to prevent these kinds of attacks. For example pnpm has controls to allowlist install scripts for dependencies and will warn about new install scripts (without executing them). There is an open issue for this: https://github.com/rust-lang/cargo/issues/13681", "context": "", "use_case": "Rust package management", "switched_from": "", "story": "Supply Chain Attack on Arrayref"}, {"id": 740046128, "item_id": 46252883, "url": "https://news.ycombinator.com/item?id=46252883", "by": "uecker", "date": "2025-12-12", "stance": "warn", "quote": "The cargo supply chain issues are also very obvious, I am far more worried about this than I ever will be about memory safety", "excerpt": "The distribution I use already has limited security updates for Rust: https://www.debian.org/releases/trixie/release-notes/issues.en.html#go-and-rust-based-packages which reduces my security. The cargo supply chain issues are also very obvious, I am far more worried about this than I ever will be about memory safety, but hopefully tor reduces its reliance on random dependencies.", "context": "Debian user", "use_case": "Rust package management", "switched_from": "", "story": "The Tor Project is switching to Rust"}]}, {"label": "Dependency sprawl", "summary": "One former Rust user says it forces an npm-like experience with many immature, semi-abandoned crates.", "quotes": [{"id": 794544000, "item_id": 49659000, "url": "https://news.ycombinator.com/item?id=49659000", "by": "throwaway273748", "date": "2026-09-11", "stance": "warn", "quote": "Cargo is a shitshow and Rust forces you into an npm-like experience", "excerpt": "This is giving real \"if all you have is a hammer\" vibes. I also have years of experience with Rust, but I moved off Rust a few years back simply because I'm sick of the anemic stdlib and lack of mature ecosystem around anything even one inch off the beaten path. Cargo is a shitshow and Rust forces you into an npm-like experience for a whole bunch of functionality that ought to be included in the box. You're juggling ", "context": "years of Rust experience, moved off Rust", "use_case": "Rust package management", "switched_from": "", "story": "Rust is tier-1 language at Microsoft"}]}], "who": [{"by": "berkes", "context": "Developer with a Perl, PHP, Ruby, Python and JS background", "url": "https://news.ycombinator.com/item?id=48481838", "date": "2026-06-10"}, {"by": "gwbas1c", "context": "C# developer for ~25 years", "url": "https://news.ycombinator.com/item?id=47722999", "date": "2026-04-10"}, {"by": "epage", "context": "Rust developer", "url": "https://news.ycombinator.com/item?id=46740699", "date": "2026-01-23"}], "tags": ["for Rust developers", "for multi-crate projects"], "use_cases": ["rust package management", "rust dependency management", "rust build and package tooling", "package management", "rust build tool", "rust workspaces"], "compared": [{"slug": "bazel", "name": "Bazel", "co": 1, "switched_from": 0, "switched_to": 1}, {"slug": "uv", "name": "uv", "co": 2, "switched_from": 0, "switched_to": 0}], "makers": [], "threads": [{"url": "https://news.ycombinator.com/item?id=49944392", "title": "The era of software quality, or the era of ostriches?", "mentions": 1}, {"url": "https://news.ycombinator.com/item?id=49643546", "title": "Rust is tier-1 language at Microsoft", "mentions": 1}, {"url": "https://news.ycombinator.com/item?id=49372853", "title": "Supply Chain Attack on Arrayref", "mentions": 1}, {"url": "https://news.ycombinator.com/item?id=49242245", "title": "Because It's Not Fun Enough: why languages fail", "mentions": 1}, {"url": "https://news.ycombinator.com/item?id=48447806", "title": "Show HN: Gitdot \u2013 a better GitHub. Open-source, anti-AI, and written in Rust", "mentions": 1}, {"url": "https://news.ycombinator.com/item?id=47720060", "title": "Why I'm Building a Database Engine in C#", "mentions": 1}], "sentiment_by_month": {"2025-11": {}, "2025-12": {"recommend": 2, "warn": 1}, "2026-01": {"neutral": 1, "recommend": 1}, "2026-02": {"recommend": 2}, "2026-03": {}, "2026-04": {"recommend": 1}, "2026-05": {}, "2026-06": {"recommend": 1}, "2026-07": {}, "2026-08": {"recommend": 1, "warn": 1}, "2026-09": {"warn": 1}, "2026-10": {"recommend": 1}}, "quotes": [{"id": 799801232, "item_id": 49987577, "url": "https://news.ycombinator.com/item?id=49987577", "by": "eviks", "date": "2026-10-07", "stance": "recommend", "quote": "How is your manual alternative to manage supply chain any better than this explicit one where transparency is standardised?", "excerpt": "> any use of Cargo to download dependencies dramatically increases supply chain security risk. > Currently the best solution is to not use programming language package managers, but GNOME\u2019s Rust code depends heavily on Cargo. That's what an ostrich would say. How is your manual alternative to manage supply chain any better than this explicit one where transparency is standardised? > I don\u2019t want to downplay the sever", "context": "", "use_case": "Rust dependency management", "switched_from": "", "story": "The era of software quality, or the era of ostriches?"}, {"id": 794544000, "item_id": 49659000, "url": "https://news.ycombinator.com/item?id=49659000", "by": "throwaway273748", "date": "2026-09-11", "stance": "warn", "quote": "Cargo is a shitshow and Rust forces you into an npm-like experience", "excerpt": "This is giving real \"if all you have is a hammer\" vibes. I also have years of experience with Rust, but I moved off Rust a few years back simply because I'm sick of the anemic stdlib and lack of mature ecosystem around anything even one inch off the beaten path. Cargo is a shitshow and Rust forces you into an npm-like experience for a whole bunch of functionality that ought to be included in the box. You're juggling ", "context": "years of Rust experience, moved off Rust", "use_case": "Rust package management", "switched_from": "", "story": "Rust is tier-1 language at Microsoft"}, {"id": 789981024, "item_id": 49373814, "url": "https://news.ycombinator.com/item?id=49373814", "by": "praseodym", "date": "2026-08-20", "stance": "warn", "quote": "Cargo doesn\u2019t have security controls in place to prevent these kinds of attacks", "excerpt": "Unfortunately Cargo doesn\u2019t have security controls in place to prevent these kinds of attacks. For example pnpm has controls to allowlist install scripts for dependencies and will warn about new install scripts (without executing them). There is an open issue for this: https://github.com/rust-lang/cargo/issues/13681", "context": "", "use_case": "Rust package management", "switched_from": "", "story": "Supply Chain Attack on Arrayref"}, {"id": 787911216, "item_id": 49244451, "url": "https://news.ycombinator.com/item?id=49244451", "by": "ch4s3", "date": "2026-08-10", "stance": "recommend", "quote": "cargo as a tool beats any language tooling for any language with similar breadth", "excerpt": "Agreed, rust is SUPER not fun IMHO but I use it a lot via FFI for things I wouldn't do in Elixir which I prefer to write/read. The broad array of well built tools on cargo is just so hard to compete with, and cargo as a tool beats any language tooling for any language with similar breadth. The JVM has every tool imaginable but I'd rather built it myself than tangle with JVM tooling.", "context": "", "use_case": "Rust build and package tooling", "switched_from": "", "story": "Because It's Not Fun Enough: why languages fail"}, {"id": 775709408, "item_id": 48481838, "url": "https://news.ycombinator.com/item?id=48481838", "by": "berkes", "date": "2026-06-10", "stance": "recommend", "quote": "lacking OOTB, common and easy dependency management like cargo", "excerpt": "Probably my reference is tainting this then. I come from Perl, PHP (both of which, at that time, had nonexisting or terrible package managing - CPAN, PEAR), then Ruby, with gems and now Python, Typescript/Javascript. Starting with Ruby, I've developed in communities that heavily depend on deep dependency trees. For me, the discipline of shallow dependencies, no-dependencies etc, was new when I came to rust. Sure, if ", "context": "Developer with a Perl, PHP, Ruby, Python and JS background", "use_case": "Rust dependency management", "switched_from": "", "story": "Show HN: Gitdot \u2013 a better GitHub. Open-source, anti-AI, and written in Rust"}, {"id": 763567984, "item_id": 47722999, "url": "https://news.ycombinator.com/item?id=47722999", "by": "gwbas1c", "date": "2026-04-10", "stance": "recommend", "quote": "I also like Cargo better than Nuget, but that's a very subjective opinion.", "excerpt": "Regarding tradeoffs: I've been working with C# for most of my career, almost 25 years, since .Net 1.0. One of the huge things that I love about Rust is the lack of a runtime framework. I don't need to figure out how to bundle / ship / install a framework at runtime. (I also like Cargo better than Nuget, but that's a very subjective opinion.) Which leads to probably the biggest tradeoff: > Typhon is an embedded... It'", "context": "C# developer for ~25 years", "use_case": "package management", "switched_from": "", "story": "Why I'm Building a Database Engine in C#"}, {"id": 755084112, "item_id": 47192757, "url": "https://news.ycombinator.com/item?id=47192757", "by": "ysleepy", "date": "2026-02-28", "stance": "recommend", "quote": "I love that cargo unifies the ecosystem, no quabble over one shitty build tool over another.", "excerpt": "Rust does not have the best tooling by far imo. The IDE capabilities are not nearly as advanced as they are for Java for example. Compared to C/C++ or dynamically typed languages, sure. I love that cargo unifies the ecosystem, no quabble over one shitty build tool over another. I feel like the IDE story still has a long way to go.", "context": "", "use_case": "Rust build tool", "switched_from": "", "story": "Rust Is Just a Tool"}, {"id": 753328785, "item_id": 47083049, "url": "https://news.ycombinator.com/item?id=47083049", "by": "jmalicki", "date": "2026-02-19", "stance": "recommend", "quote": "I personally find cargo and the dependencies there to be roughly as ergonomic as python", "excerpt": "I love Diesel for ORMs - it's very much in the same spirit as a type safe sqlalchemy, so it depends if you like that. The type safety is a great feature, it always saves me from writing incorrect queries (a huge one is nullability is represented as an option, so nullability mismatches are caught very early). It has an async version that is not as well maintained so it does lag behind, but I've never had an issue with", "context": "", "use_case": "Rust package management", "switched_from": "", "story": "Farewell Rust"}, {"id": 747851184, "item_id": 46740699, "url": "https://news.ycombinator.com/item?id=46740699", "by": "epage", "date": "2026-01-23", "stance": "recommend", "quote": "Cargo workspaces allow for sharing parts of the manifest through \"workspace inheritance\"", "excerpt": "In Rust, we use workspaces for - splitting up a package into smaller compilation units to speed up builds as llvm doesn't like large compilation units, e.g. I'm assuming this is why uv is split up - splitting semver concerns (easiest if different parts of the api are versioned independently), e.g. one hope for splitting out `serde_core` is to allow breaking changes of `serde_derive` - splitting out optional parts to ", "context": "Rust developer", "use_case": "Rust workspaces", "switched_from": "", "story": "Workspaces and Monorepos in Package Managers"}, {"id": 743870113, "item_id": 46491882, "url": "https://news.ycombinator.com/item?id=46491882", "by": "arjie", "date": "2026-01-04", "stance": "neutral", "quote": "I use cargo to manage the rust toolchain", "excerpt": "I use `mise` to manage all my tool versions[0] and committing the version file to the repo is sufficient for later use. https://mise.jdx.dev/ 0: not all, I use cargo to manage the rust toolchain", "context": "", "use_case": "managing Rust toolchain", "switched_from": "", "story": "Jeffgeerling.com has been Migrated to Hugo"}, {"id": 740046128, "item_id": 46252883, "url": "https://news.ycombinator.com/item?id=46252883", "by": "uecker", "date": "2025-12-12", "stance": "warn", "quote": "The cargo supply chain issues are also very obvious, I am far more worried about this than I ever will be about memory safety", "excerpt": "The distribution I use already has limited security updates for Rust: https://www.debian.org/releases/trixie/release-notes/issues.en.html#go-and-rust-based-packages which reduces my security. The cargo supply chain issues are also very obvious, I am far more worried about this than I ever will be about memory safety, but hopefully tor reduces its reliance on random dependencies.", "context": "Debian user", "use_case": "Rust package management", "switched_from": "", "story": "The Tor Project is switching to Rust"}, {"id": 738972034, "item_id": 46185752, "url": "https://news.ycombinator.com/item?id=46185752", "by": "wonklebonkle", "date": "2025-12-07", "stance": "recommend", "quote": "In Iced you write in Rust and use Cargo packages. This gives the developer ultimate composability", "excerpt": "Iced is a wonderful dead-simple framework. I hope it forever maintains the simplicity which combines nicely with Rust\u2019s features. One thing I love about Iced and miss in Qt is writing the software in a single language. Qt has chosen to introduce multiple languages into their framework which makes the entire codebase a huge learning curve. In Qt you write your display layer in QML then your UI logic in Javascript and ", "context": "", "use_case": "Rust package management", "switched_from": "", "story": "Iced 0.14 has been released (Rust GUI library)"}, {"id": 738868385, "item_id": 46179274, "url": "https://news.ycombinator.com/item?id=46179274", "by": "oconnor663", "date": "2025-12-06", "stance": "recommend", "quote": "Cargo has really spoiled me.", "excerpt": "> We recommend using Nix to easily ensure you are running the right versions of the tools and libraries. Ooof I remember when everything used to be like this. Cargo has really spoiled me.", "context": "", "use_case": "Rust build and dependencies", "switched_from": "", "story": "Eurydice: a Rust to C compiler"}]}