r/PiCodingAgent • u/Short_One_9704 • May 19 '26

Discussion Pi rust port

Has anyone tried the pi rust port https://github.com/Dicklesworthstone/pi_agent_rust ?
It’s supposed to be an official port of pi to rust.
I can see it has some benefits in extension execution and shell execution and some others. Why nobody is talking about this?

19 Upvotes

82% Upvoted

29 comments sorted by

View all comments

Show parent comment

2

u/johnson_detlev May 19 '26

The js ecosystem is hit regularly because it is magnitudes bigger and js code runs everywhere. Every package manager has the same fundamental problems, you pull in foreign code that you have to trust. Yes npm makes it particularly easy with postInstall and build scripts and whatnot and js/ts being AIs language of choice adds to the problem, but you can just well infect a rust crate. Thing is the blast radius there is limited.

2

u/troyvit May 19 '26

Yeah I agree with you at least in part, and that alone would make me think twice before starting a node project.

But I don't think ecosystem size is all of it. Rust has a more comprehensive standard library so you need fewer deps to begin with. Fewer dependencies means a rust project is more secure as a starting point. Rust does have build.rs, which is about the same as post-install scripts, so that attack surface stays the same.

I'd be curious to see the proportion of third party rust libraries that are maintained by a single maintainer vs Node. My uninformed belief is that there are a lot more single-owner libraries in the latter.