This blog post was posted two days before the discovery of the XZ utils backdoor. It shows the increasing popularity of Docker and NPM. Rust is not in this preview of their report, but all the crates used for compiling a Rust program bring in dependencies. Years ago, xkcd showed the problem already.