"17% of the most popular Rust packages contain code that virtually nobody knows what it does (I can't imagine about the long tail which receives less attention)."

https://kerkour.com/fixing-rust-supply-chain-security