News for hackers. Stuff that matters.
Re:Show HN: Brioche – A new Nix-like package manager by IshKebab on Tuesday June 04, 2024 @04:05AM (#40571873)
Why? Are you referring to the fact that it's opt-in; you have to use `cargo build --locked` or `npm ci`?
Re:Show HN: Brioche – A new Nix-like package manager by bavarianbob on Tuesday June 04, 2024 @01:02PM (#40576681)
I interpreted the parent to mean that it might not be fair to assume existing package managers have done a _great_ job at downloading and verifying, especially verifying, resources from the network. There are businesses that exist attempting to solve this problem like socket.io. Safely installing the correct dependencies for a project is still not a guarantee from any of the major package managers.