Ah. Apparently I didn’t use that crate, so happily missed that footgun, thanks for the info! That is an unfortunate case.

Though I suspect it’s fair to say the entire settlement is built of glass houses here :-)

https://news.ycombinator.com/item?id=43798312

I suppose if one wants absolutely no surprises, they will need to lock the entire toolchain as well, regardless of the language…