Fosstodon

Habr[Перевод] Вычисляем коэффициент популярности крейтов Rust для работы и для хобби-проектовТвит, который подтолкнул меня к реализации описанного в статье мини-проекта. Взявшись за эту задачу, я около двух часов ваял небольшой скрипт, который будет скрейпить данные из базы крейтов Rust crates.io и анализировать их для выяснения, какие пакеты чаще скачиваются для работы (то есть в будние дни), а какие для развлечения (то есть в выходные).<a href="https://habr.com/ru/companies/ruvds/articles/921326/" rel="nofollow noopener" translate="no" target="_blank">https://habr.com/ru/companies/ruvds/articles/921326/</a><a href="https://zhub.link/tags/ruvds_%D0%BF%D0%B5%D1%80%D0%B5%D0%B2%D0%BE%D0%B4" class="mention hashtag" rel="nofollow noopener" target="_blank">#ruvds_перевод</a> <a href="https://zhub.link/tags/%D0%B0%D0%BD%D0%B0%D0%BB%D0%B8%D1%82%D0%B8%D0%BA%D0%B0_%D0%B4%D0%B0%D0%BD%D0%BD%D1%8B%D1%85" class="mention hashtag" rel="nofollow noopener" target="_blank">#аналитика_данных</a> <a href="https://zhub.link/tags/rust" class="mention hashtag" rel="nofollow noopener" target="_blank">#rust</a> <a href="https://zhub.link/tags/%D0%BA%D1%80%D0%B5%D0%B9%D1%82%D1%8B" class="mention hashtag" rel="nofollow noopener" target="_blank">#крейты</a> <a href="https://zhub.link/tags/cratesio" class="mention hashtag" rel="nofollow noopener" target="_blank">#cratesio</a> <a href="https://zhub.link/tags/%D0%B2%D0%B8%D0%B7%D1%83%D0%B0%D0%BB%D0%B8%D0%B7%D0%B0%D1%86%D0%B8%D1%8F_%D0%B4%D0%B0%D0%BD%D0%BD%D1%8B%D1%85" class="mention hashtag" rel="nofollow noopener" target="_blank">#визуализация_данных</a>

Rachael Ava 💁🏻‍♀️:BoostOK: Have you ever needed to build an array of hexadecimal digits in your Rust project, but you're too lazy to do it yourself? :blobfoxdead:This simple Rust crate I developed comes with both uppercase and lowercase arrays of all 16 hexadecimal digits! :blobfoxnerd:It's MIT licensed, has no dependencies, good documentation, and works in embedded environments without the Rust standard library. It's also my first Rust library that I've published. :blobfoxfloofcute:Feedback is welcome, and I'd be happy if you'll consider using it in your future projects. :blobfoxhappy:<a href="https://crates.io/crates/hexadecimal-digits" rel="nofollow noopener" translate="no" target="_blank">https://crates.io/crates/hexadecimal-digits</a><a href="https://codeberg.org/RachaelAva1024/hexadecimal-digits" rel="nofollow noopener" translate="no" target="_blank">https://codeberg.org/RachaelAva1024/hexadecimal-digits</a><a href="https://tech.lgbt/tags/Hexadecimal" class="mention hashtag" rel="nofollow noopener" target="_blank">#Hexadecimal</a> <a href="https://tech.lgbt/tags/Hex" class="mention hashtag" rel="nofollow noopener" target="_blank">#Hex</a> <a href="https://tech.lgbt/tags/Rust" class="mention hashtag" rel="nofollow noopener" target="_blank">#Rust</a> <a href="https://tech.lgbt/tags/RustLang" class="mention hashtag" rel="nofollow noopener" target="_blank">#RustLang</a> <a href="https://tech.lgbt/tags/RustLibrary" class="mention hashtag" rel="nofollow noopener" target="_blank">#RustLibrary</a> <a href="https://tech.lgbt/tags/Cargo" class="mention hashtag" rel="nofollow noopener" target="_blank">#Cargo</a> <a href="https://tech.lgbt/tags/CratesIO" class="mention hashtag" rel="nofollow noopener" target="_blank">#CratesIO</a>

Antonin DelpeuchA GitHub account is required to publish on crates.io, I learned today from <a href="https://fosstodon.org/@dcz" class="u-url mention" rel="nofollow noopener" target="_blank">@dcz</a>. Disappointing… <a href="https://github.com/rust-lang/crates.io/issues/326" rel="nofollow noopener" translate="no" target="_blank">https://github.com/rust-lang/crates.io/issues/326</a><a href="https://mamot.fr/tags/rust" class="mention hashtag" rel="nofollow noopener" target="_blank">#rust</a> <a href="https://mamot.fr/tags/cratesio" class="mention hashtag" rel="nofollow noopener" target="_blank">#cratesio</a> <a href="https://mamot.fr/tags/GitHub" class="mention hashtag" rel="nofollow noopener" target="_blank">#GitHub</a>

jmcnamaraIs the documentation building on crates.io broken? It looks like any crate uploaded in the last 12 hours doesn’t have updated docs. <a href="https://hachyderm.io/tags/rustlang" class="mention hashtag" rel="nofollow noopener" target="_blank">#rustlang</a> <a href="https://hachyderm.io/tags/cratesio" class="mention hashtag" rel="nofollow noopener" target="_blank">#cratesio</a> <a href="https://hachyderm.io/tags/docsrs" class="mention hashtag" rel="nofollow noopener" target="_blank">#docsrs</a>

PhylumThe <a href="https://infosec.exchange/tags/xz" class="mention hashtag" rel="nofollow noopener" target="_blank">#xz</a> backdoor continues to pop up. We recently located the backdoor binaries in a popular Rust crate. Thanks to the quick work by the maintainer, the problem was quickly solved!<a href="https://blog.phylum.io/rust-crate-shipping-xz-backdoor" rel="nofollow noopener" translate="no" target="_blank">https://blog.phylum.io/rust-crate-shipping-xz-backdoor</a><a href="https://infosec.exchange/tags/rust" class="mention hashtag" rel="nofollow noopener" target="_blank">#rust</a> <a href="https://infosec.exchange/tags/cratesio" class="mention hashtag" rel="nofollow noopener" target="_blank">#cratesio</a> <a href="https://infosec.exchange/tags/opensource" class="mention hashtag" rel="nofollow noopener" target="_blank">#opensource</a> <a href="https://infosec.exchange/tags/rustacean" class="mention hashtag" rel="nofollow noopener" target="_blank">#rustacean</a> <a href="https://infosec.exchange/tags/cargo" class="mention hashtag" rel="nofollow noopener" target="_blank">#cargo</a> <a href="https://infosec.exchange/tags/backdoor" class="mention hashtag" rel="nofollow noopener" target="_blank">#backdoor</a>

Dave WarnockUpdating makes my head spin. This evening: - new version of <a href="https://amastodon.uk/tags/RustLang" class="mention hashtag" rel="nofollow noopener" target="_blank">#RustLang</a> several <a href="https://amastodon.uk/tags/CratesIo" class="mention hashtag" rel="nofollow noopener" target="_blank">#CratesIo</a> updates in Cargo.toml had to reinstall Cargo watch - then a new <a href="https://amastodon.uk/tags/NeoVim" class="mention hashtag" rel="nofollow noopener" target="_blank">#NeoVim</a> release and merge Nvim-starter-kit updates. I still have a way to go on good Rust support - a little progress towards login and tenancy on <a href="https://amastodon.uk/tags/PrayerOfHannah" class="mention hashtag" rel="nofollow noopener" target="_blank">#PrayerOfHannah</a> Yes I'm still very slow navigating around multiple files and windows in NeoVim but I'm getting more comfortable with basic editing.

Matúš :fedora: :ferris:Hi, <a href="https://fosstodon.org/tags/fediverse" class="mention hashtag" rel="tag">#fediverse</a>, I'm Matus Mastena, a 15-yar-old who ports unofficial <a href="https://fosstodon.org/tags/Edupage" class="mention hashtag" rel="tag">#Edupage</a> API by @loumadev and @ivanhrabcak on <a href="https://fosstodon.org/tags/GitHub" class="mention hashtag" rel="tag">#GitHub</a> to Rust. I'm doing this because Edupage is very closed and it'll be great to have an alternative app in <a href="https://fosstodon.org/tags/CLI" class="mention hashtag" rel="tag">#CLI</a> for checking what your teacher gave you for homework, for example. It is already on <a href="https://fosstodon.org/tags/cratesio" class="mention hashtag" rel="tag">#cratesio</a> and if you want to contribute, create an account on my <a href="https://fosstodon.org/tags/Gitea" class="mention hashtag" rel="tag">#Gitea</a> instance, fork or mirror the project, make changes, make PR and wait for it to be accepted. <a href="https://fosstodon.org/tags/introduction" class="mention hashtag" rel="tag">#introduction</a> <a href="https://fosstodon.org/tags/rust" class="mention hashtag" rel="tag">#rust</a>

Louis LangWe are once again blocking a <a href="https://fosstodon.org/tags/SoftwareSupplyChain" class="mention hashtag" rel="tag">#SoftwareSupplyChain</a> attack! Weve reporting on our efforts to protect <a href="https://fosstodon.org/tags/javascript" class="mention hashtag" rel="tag">#javascript</a> and <a href="https://fosstodon.org/tags/python" class="mention hashtag" rel="tag">#python</a> developers in recent weeks. Now it's <a href="https://fosstodon.org/tags/rust" class="mention hashtag" rel="tag">#rust</a>'s turn.Stopping <a href="https://fosstodon.org/tags/malware" class="mention hashtag" rel="tag">#malware</a> authors publishing to <a href="https://fosstodon.org/tags/cratesio" class="mention hashtag" rel="tag">#cratesio</a> 🦀<a href="https://blog.phylum.io/rust-malware-staged-on-crates-io/" target="_blank" rel="nofollow noopener" translate="no">https://blog.phylum.io/rust-malware-staged-on-crates-io/</a>

postmodernNew Supply Chain Attack Vector just dropped: falsely report a single package on a package repository website as being malicious to the Google Safe Browsing List, and they will block the entire freaking domain! Chrome, Firefox, and Brave, all use the Google Safe Browsing API to warn users if they're about to visit a malicious domain, and make it difficult to override. Lots of other websites/services also use the Google Safe Browsing List/API to filter links, such as Reddit, Blogger, and Google Workplaces / GMail.This literally just happened today to the <a href="https://rubygems.org/gems/metasploit-payloads" rel="nofollow noopener" target="_blank">metasploit-payloads</a> gem (last version released on May 8th, 2023) on <a href="https://rubygems.org" rel="nofollow noopener" target="_blank">https://rubygems.org</a> and took several hours to resolve. During which time, users got a giant red warning screen when visiting rubygems.org, new Reddit comments linking to rubygems.org got auto-removed, Blogger automatically flagged/removed old blog posts that contained rubygems.org links, the Ruby Weekly newsletter got flagged by Google Workplaces as containing malware because it linked back to rubygems.org, and a few people on Twitter reported DNS issues with their CI server because they were using Google Safe Browsing List to filter DNS domains.Now imagine if someone falsely reported pwntools on PyPi to the Google Safe Browsing List? Imagine how much disruption that would cause to the Python ecosystem if suddenly <a href="https://pypi.org" rel="nofollow noopener" target="_blank">https://pypi.org</a> started getting flagged as malicious by the Google Safe Browsing List? Imagine the confusion and frustration when people's Reddit comments and Blogger posts started getting auto-removed?Yeah, maybe Google should add a new policy for handling abuse reports about packages on package repository websites, like not flagging the entire domain, or better yet forward the abuse reports to the website's admins and let them review the package in question.<a href="https://infosec.exchange/tags/supplychain" class="mention hashtag" rel="nofollow noopener" target="_blank">#supplychain</a> <a href="https://infosec.exchange/tags/supplychainsecurity" class="mention hashtag" rel="nofollow noopener" target="_blank">#supplychainsecurity</a> <a href="https://infosec.exchange/tags/googlesafebrowsing" class="mention hashtag" rel="nofollow noopener" target="_blank">#googlesafebrowsing</a> <a href="https://infosec.exchange/tags/rubygems" class="mention hashtag" rel="nofollow noopener" target="_blank">#rubygems</a> <a href="https://infosec.exchange/tags/pypi" class="mention hashtag" rel="nofollow noopener" target="_blank">#pypi</a> <a href="https://infosec.exchange/tags/npm" class="mention hashtag" rel="nofollow noopener" target="_blank">#npm</a> <a href="https://infosec.exchange/tags/cratesio" class="mention hashtag" rel="nofollow noopener" target="_blank">#cratesio</a>

jamesMy first crate on crates.io: <a href="https://crates.io/crates/hsv" rel="nofollow noopener" target="_blank">https://crates.io/crates/hsv</a> Simple converter for values in HSV color space to RGB <a href="https://mastodon.online/tags/rust" class="mention hashtag" rel="nofollow noopener" target="_blank">#rust</a> <a href="https://mastodon.online/tags/color" class="mention hashtag" rel="nofollow noopener" target="_blank">#color</a> <a href="https://mastodon.online/tags/cratesio" class="mention hashtag" rel="nofollow noopener" target="_blank">#cratesio</a> <a href="https://mastodon.online/tags/hsv" class="mention hashtag" rel="nofollow noopener" target="_blank">#hsv</a> <a href="https://mastodon.online/tags/rgb" class="mention hashtag" rel="nofollow noopener" target="_blank">#rgb</a>

μCoderyAfter a long time of just playing around, I finally published my first package to crates.io. Does this mean I'm now a cargo cultist? <a href="https://fosstodon.org/tags/Rustlang" class="mention hashtag" rel="tag">#Rustlang</a> <a href="https://fosstodon.org/tags/Cargo" class="mention hashtag" rel="tag">#Cargo</a> <a href="https://fosstodon.org/tags/Cratesio" class="mention hashtag" rel="tag">#Cratesio</a> <a href="https://fosstodon.org/tags/Packaging" class="mention hashtag" rel="tag">#Packaging</a>

Lane Sawyer🌹Published my first <a href="https://mastodon.social/tags/rust" class="mention hashtag" rel="nofollow noopener" target="_blank">#rust</a> crate on <a href="https://mastodon.social/tags/cratesio" class="mention hashtag" rel="nofollow noopener" target="_blank">#cratesio</a> today! It's not much, but it's there: <a href="https://crates.io/crates/aws_parameter_update" rel="nofollow noopener" target="_blank">https://crates.io/crates/aws_parameter_update</a>

Recent searches

Search options

Administered by:

Server stats:

#cratesio