A Sad Day for Rust
A lot of this thread has it wrong, and this wrongness contributes to the problem which led to this.<p>I have two simple mantras which establish my philosophy here:<p>1. YOU are responsible for your dependencies.<p>2. Open source participants are volunteers and owe you nothing.<p>It was never Nikolay's job to vet actix-web for you, nor did it become his job when the library became popular, nor does invoking "security" change anything in the slightest. Your dependencies are your responsibility. Responding with vitrol, anger, or hate when failing to uphold this responsibility bites you in the ass is just being a jerk.<p>User entitlement is totally unjustified and will burn out maintainers faster than almost anything else. I don't stand for it. If any other maintainers out there are struggling with this, please send me an email: sir@cmpwn.com. I'm sympathetic to your cause and I can likely lend some pertinent advice.