Ask HN: Evidence for JavaScript ecosystem being more vulnerable than Rust's?