Re:The modern packager’s security nightmare
by 0xbadcafebee on Sunday February 21, 2021 @09:57PM
(#26220312)
> it's proven to be inadequate for modern software development
Sure, because it's not meant for software development. It's meant for users to run software.
Software development packagaing/distribution is pretty bad. Most languages do it their own way and never seem to learn the lessons of previous ones. And on top of that, they encourage poor habits, like writing your own module that's the same as somebody else's with one new function, rather than contributing to the existing module, or writing an extension for it.
> I do not trust system provided libraries to function with my applications because I've been burned so many times in the past.
Probably this is because both you + the library developer are not coordinating with the distributions on how you release your code. Distros get a lot of flack for breaking changes, but they're working from software released by developers, and rely entirely on their own user base to test changes. If developers cared about their software working they'd be more involved in its packaging & distribution.
Sure, because it's not meant for software development. It's meant for users to run software.
Software development packagaing/distribution is pretty bad. Most languages do it their own way and never seem to learn the lessons of previous ones. And on top of that, they encourage poor habits, like writing your own module that's the same as somebody else's with one new function, rather than contributing to the existing module, or writing an extension for it.
> I do not trust system provided libraries to function with my applications because I've been burned so many times in the past.
Probably this is because both you + the library developer are not coordinating with the distributions on how you release your code. Distros get a lot of flack for breaking changes, but they're working from software released by developers, and rely entirely on their own user base to test changes. If developers cared about their software working they'd be more involved in its packaging & distribution.