Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

> Ferrocene goes beyond the compiler in keeping all aspects of the software being built in mind, particularly the distribution, traceability and use of own or foreign libraries. We’re committed to providing secure, auditable distribution channels for these toolchain updates. Active communication of issues to clients and helping with fixes rounds up the package.

Does this mean they're going to have a curated subset of crates they'll be willing to vouch for? Cool if true, but sounds like a very significant amount of work.



> Cool if true, but sounds like a very significant amount of work.

Not coincidentally, it's the sort of work that the sort of people who use verified compilers have the incentive to pay for.


Undoubtedly, and having a compliant compiler without being able to use any external crates would certainly be a major downer, so I'm sure they've thought this through and done their market research.


I imagine they will want to provide/audit all the dependencies of rust toolchain which is already hundreds(?) of crates. It probably isn't much extra work to offer the same crates as some sort of platform.




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: