Aube – Node.js package manager in Rust

giancarlostoro

Interesting has a 24hr cooldown before trusting package updates and a no-trust option for trusting downgrades given all the npm hacks and issues lately, smart move. I wonder if there's better ways to protect against this.

gu5

appears vibecoded which doesn't give me confidence, still interesting though. pnpm has also moved a few of its components from javascript to rust in its latest release