Comment by adamc

The vulnerability to supply chain attacks gives me pause. It's not unique to rust and it bothers me with npm or Python as well.