The rust ecosystem is young, most of those libraries haven't even reached 1.0.
Basing any serious project on 0.x libraries is always subject to this issue.
Basing any serious project on 0.x libraries is always subject to this issue.
I think this speaks to rust's strengths in that if you know your spec, you can write a rock-solid version of it - and its weakness, where if you don't know your spec you'll be making breaking changes a lot.
So I guess I'll hold off on having random numbers in Rust then [1].
For most use-cases, it's fine to stay on out of date libraries for years, and that's what the Linux distros do all the time (mostly patching crippling bugs and security vulnerabilities).