I think this is right about Rust and Cargo, but I would say that Rust has a major advantage in that it implements frozen + offline mode really well (which if you use, obviously significantly decreases the risks).

Any time I ever did the equivalent with NPM/node world it was basically unusable or completely impractical

▲

bhouston 4 hours ago | parent [-]

Pnpm (a very popular npm replacement) makes completely locked packages easy and natural and ultra fast:

https://pnpm.io/cli/install

Benchmarks:

https://pnpm.io/benchmarks

▲

15155 3 hours ago | parent [-]

pnpm is so laughably terrible compared to Cargo it's not even comparable in the same breath.

	▲	bhouston an hour ago \| parent [-]
		Why specifically? Your comment isn't very informative. Anyhow, here a Claude.ai comparison: https://claude.ai/share/72d2c34c-2c86-44c4-99ec-2a638f10e3f0