Re:The modern packager’s security nightmare
by virgo_eye on Monday February 22, 2021 @06:25AM
(#26223266)
It's clear that your approach is a possible approach:
1. 'only use good libraries'
2. 'it's not your job as a developer to make sure your application can be installed'
3. 'if your users want to use pip... they should be able to fix those issues'
However, this isn't a solution to the problem that led to the existence of language ecosystems. It is a refusal to acknowledge the problem.
1. 'only use good libraries' 2. 'it's not your job as a developer to make sure your application can be installed' 3. 'if your users want to use pip... they should be able to fix those issues'
However, this isn't a solution to the problem that led to the existence of language ecosystems. It is a refusal to acknowledge the problem.