Rust devs push back as Serde project ships precompiled binaries

Serde, a popular Rust (de)serialization project, has decided to ship its serde_derive macro as a precompiled binary. This has generated a fair amount of concern among some developers who highlight the future legal and technical issues this may pose, along with a potential for supply chain attacks. [...]

attacks back binary developers fair future generated legal macro may popular project rust security serialization ship ships supply supply chain supply chain attacks technical