It does, but critical packages come with vendored dependencies, for everything else you can keep a tree that you update yourself and build Rust software with "--frozen", so the build environment doesn't have do bring anything in on its own — for reproducibility's sake.

I think that's what xbps-src in Void does, packaging every crate individually would be overkill.

CC: @newt@stereophonic.space