> > it is not expected to use cargo to resolve them from random (possibly > inaccessible) places > > Yes, I agree with you. So, I suggested the possibility of forbidding the > Git dependency. Or, do you call crates.io, Rust's official repository, > "random places"? If CRAN cannot trust even the official one of Rust, why > does CRAN have Rust at all?
It's worth noting that crates.io is supported by the Rust foundation (https://foundation.rust-lang.org). Judging from their most recent annual report (https://foundation.rust-lang.org/static/publications/annual-reports/annual-report-2022.pdf), where they reported a $880k surplus, I think they're probably going to be around for a while. Hadley -- http://hadley.nz ______________________________________________ R-package-devel@r-project.org mailing list https://stat.ethz.ch/mailman/listinfo/r-package-devel
