Aelspire GoToSocial Actor feed

I think it's high time to check Zig once again. With current stance against L

Note 2026-10-02T12:04:40+00:00 View original ->

I think it's high time to check Zig once again.

With current stance against LLMs and other stuff this language is looking better and better in my eyes. Last time I was comparing it with Rust, I ended liking Rust more due to how easy was to make a simple hobby project with it and how much software I can potentially contribute to knowing this language. But Rust's strongest point – having crate for almost every single task in programming is related to the point I don't like in Rust – crates.io, a big central place for crates which is an obvious target for supply chain attacks, like in case of PyPI and npm. While I understand rationale behind having small std library and delegating more to third party libraries, which in result leads to need for having them easily accessible for the best developer experience. I still prefer something else. I think I like the way Go does it more, and I think Zig is doing something similar but I'm not sure.

And now, from what I know, some of big and important crates are allowing LLM contributions, which leads to avoiding using LLMs as much as possible, being a hard task when using Rust.

I expect stronger #NoAI stance of the Zig project might lead to fostering community, I might be interested in participating in. But IMHO Rust's policy is not that bad, so I'm still not really sure which language I prefer.

Also the whole thinking about which language I like more is probably just me wasting time, as I'm currently using C++ most of time due to my job and other stuff. But if I ever have chance to use something else, I would like to have some opinion ready. As much as I like Hare, I think this language might not be an option when the opportunity would happen in my job.

My biggest grief with Hare is that I'll probably never have an opportunity to use it professionally…

EDIT: Check discussion in replies about pros of centralized repos like crates.io, as my point about decentralized ones being more resilient to supply chain attacks might be complete bullshit. I've just learned about new possibility.

#Zig #Ziglang #Harelang #Rust

Comments

AMDmi3@fosstodon.org ⁨3⁩ ⁨weeks⁩ ago
@aelspire How exactly in your opinion centralized module repositories facilitate supply chain attacks? Let me remind that in the recent arrayref incident, it was crates.io which stopped the attack in less than 2 hours. Without a registry, you're one on one with raw git repositories, which can do much nastier things which are much harder to spot, stop, mitigate and investigate. So go users are in much more danger, but no one talks about it as there's no "central place" to put the blame on.