So happy to hear that! I hope this starts a tradition of cargo-less rust that is sorely missing.
Rationale: just like Rust does not let you segfault, a decent build system should not let you download shit from the internet. Much less so, without asking you explicit permission. Much less so, silently and by default.
Totally agree. Not sure when downloading millions of lines of random code from the internet and executing it with essentially full permissions became a programmer virtue.
...sure, by specifying the whole url and calling an external program where the actual shit downloading happens. The same as bash, C and so on. Of course, it is in very bad taste to do so, and by no means a standard or even common thing to do when using makefiles.
Maybe it would be OK if cargo let you download code, after giving it a sort of "unsafe" flag or something. But the current behavior is just bonkers.
Don't understand your gripe. Is it just that you don't like things to be this easy for the dev? Dependencies should not just be disfavored but actually hard to use?