Re:The modern packager’s security nightmare
by rcxdude on Sunday February 21, 2021 @07:51PM
(#26219143)
> I do not trust system provided libraries to function with my applications because I've been burned so many times in the past.
I agree. About half the issues I've had with dependencies has been due to distributions fiddling with upstream for some reason or another. Probably the main reason I like Arch (which has a policy of just following vanilla upstream, though they aren't immune: 'python' being python 3 is probably the biggest pain point)
I agree. About half the issues I've had with dependencies has been due to distributions fiddling with upstream for some reason or another. Probably the main reason I like Arch (which has a policy of just following vanilla upstream, though they aren't immune: 'python' being python 3 is probably the biggest pain point)