On: Malicious Rust crate Arrayref runs a build-time payload

[cosmic_cheese]

> I don't see the problem with boost?

There are many issues that I've seen taken up with Boost, but my personal peeve is how it can make building projects that incorporate it a pain, both because of its sheer size but also because it can sometimes be difficult to appease with its own dependencies.

[peesem → cosmic_cheese]

that seems unrelated to the security problem to me