Cargo is one of the main strengths of Rust but it's also poorly managed. It's not just the time it takes to sync cargo and the massive dependencies even small projects have. Namespacing should have been implemented early [1] (see related issues too). They should have learned from Python's mistakes. Instead it's impossible to tell based on package names what is genuine or trustworthy. There is also a serious name squatting problem.

I honestly think that the Rust developers should just bit the bullet and fix it with Cargo 2.0. Take the opportunity to discard dead packages too.

[1] https://github.com/rust-lang/crates.io/issues/58

>How do I know if I restart the process 2′ later the source of the dependencies hasn’t changed?

Your cargo.lock file?

I moved all my systems to FreeBSD few months ago

There is no future for Linux as a OS, it got eaten alive by big corps and religious communities, the inclusion of Rust was the final straw