News for hackers. Stuff that matters.

A comment on Grafana releases OnCall open source project. Parent comment

Re:Grafana releases OnCall open source project by dijit on Sunday June 19, 2022 @09:45PM (#31805411)
No person manages more than 250 packages (and he's a RH employee).

There's more than a hundred package maintainers (I'm not sure exactly how many), but the median is about 50 packages.

Do you think people can't keep up with the updates for 50 packages?

[ Parent | on HN ]
Re:Grafana releases OnCall open source project by morelisp on Friday June 24, 2022 @07:13PM (#31870698)
I think I don't want "more than a hundred" additional points of trust, especially if they're trying to audit 50+ projects with various levels of familiarity each. And no, I don't believe one person can give a real audit to 50 packages each release even if was their actual job.

To paraphrase, all "more than a hundred" of those people need to be lucky every time.

[ Parent | on HN ]