> Yes, exactly. Meanwhile the Rust community, in its current fast-changing, cutting-edge state is doing its best to work itself into being a basic dependency for everything. In the name of safety.

I don't understand your complaint here. It feels like you want to have your cake and eat it. You want nobody else to use anything too new to be packaged in enterprise Linux repositories, yet you want freedom to use the latest versions of these software, despite having perfectly usable versions for your era of software packaged in that enterprise distro.

Rust is now an indirect dependency of ansible and you need to go outside the RHEL supported process to build the latest commit of ansible (or Firefox, or linkerd, or whatever) on your RHEL/CentOS 7 system. Or you could just use the RHEL supported version of ansible.

The current RHEL version (RHEL 8) even has Rust packages, in the same repository and level of trust as such famously cutting edge software as nginx, node and dotnet.

Take a survey of how many companies are or will ever be on RHEL 8...Most likely only the ones that have 100% of their infrastructure on RHEL and nothing else. A rare few, even in finance these days.

I'm not trying to have my cake and eat it to, I'm asking for package maintainers to use their fucking brains. pyca/cryptography only runs on Rust 1.41 now after efforts that were made to downgrade to a more stable/available/packaged Rust version.

And on the Rust community/leadership, urging everyone to use the bleeding new (curl rustup | sh) instead of stable packages is herding a bunch of lemmings who really should know better, professionally speaking, into building a world that is less maintainable than when they started.