Ew, gross. Crates.io is already a security trainwreck in progress. Do we really need to add even more attack vectors? It's also solving a non-problem. I mod

Ew, gross. Crates.io is already a security trainwreck in progress. Do we really need to add even more attack vectors? It's also solving a non-problem. I modify source code downloaded from crates.io zero times per day, so I compile each crate only once. Compile times matter for code I write myself: I modify (and therefore compile) that code dozens of times per day.