Another way to mitigate type squatting would be namespacing crates. Much easier to verify who owns the package and related packages
Doesn't really help: what if you typo the namespace instead? Same exact issue. Namespaces are useful for other things though, but not security.
Another way to mitigate type squatting would be namespacing crates. Much easier to verify who owns the package and related packages
Doesn't really help: what if you typo the namespace instead? Same exact issue. Namespaces are useful for other things though, but not security.