crates.io

crates.io is the package repository for Rust packages.

Github dependency

You can only authenticate to crates.io using a Github login. This has two problems.

• If any Github or Microsoft employee dislikes you, they can cut you off from publishing Rust packages.
• A Github or Microsoft employee can log in as any crates.io user, and publish malicious updates to any package.

If crates.io had regular authentication instead of only Github authentication, both of these issues could be fixed for any regular-auth users.

API

Download package source code

https://crates.io/api/v1/crates/serde/1.0.218/download

Leave a Comment