Rust

A checklist for people using Rust to develop Firefox services, to be used in addition to the common checklist.

[x] Use cargo-audit to check for dependency security vulnerabilities
[x] Use rust-clippy for linting (easier for new projects)
[x] Use slog-mozlog-json for service logging
[x] Binaries (as opposed to libraries) should include a Cargo.lock file in version control
[x] Use dependabot to keep your dependencies up to date
[ ] Add #![forbid(unsafe_code)] to your crate (e.g. the top of main.rs or lib.rs)
- [x] If you must use 'unsafe', include a comment explaining why you believe its use is sound and its behavior is correct and well defined
[x] Only use Rust nightly when it is absolutely necessary
- [x] If you have to use nightly track the features you require so that you can move off it once they are merged into stable
[ ] Minimise dependencies (not Rust specific, but important due to the relative immaturity of the ecosystem)
- Check to see if existing crates already have the functionality
- Consider implementing simple functionality instead of adding a new dependency
- Give preference to
- Crates that are already vendored into Firefox.
- Crates from rust-lang-nursery
- Crates that appear to be widely used in the rust community.

Recommended crates

Crate	Description
Actix	Actix is a Rust actors framework.
Hyper	A fast and correct HTTP implementation for Rust.
Reqwest	An ergonomic, batteries-included HTTP Client for Rust.
Serde	Serde is a framework for serializing and deserializing Rust data structures efficiently and generically.
Slog	The logging for Rust

Additional recommendations can be proposed via PRs or issues.