Kerkour introduces stdx Git-distributed Rust standard library

The author argues that centralized package repositories and package managers like crates.io are fundamentally broken and create severe software supply chain security risks through obfuscation and excessive attack surfaces. Pointing to Go's hybrid decentralized model and checksum databases as a superior approach, the author introduces stdx, an extended standard library for Rust distributed exclusively via Git to eliminate reliance on external dependency registries. Open article →