Re:Ask HN: Homebrew, Asdf, Nix, or Other?
by hschne on Monday August 12, 2024 @12:51AM
(#41221248)
Have been using asdf (with Ruby and JS) for years, haven't had a reason to look for something else yet.
[ Parent
| on HN ]
I stopped using asdf as it's a huge security nightmare. Literally, you're running third-party Bash scripts, which have no checksums and absolute no security considerations! Even WordPress is better as it controls the source code of the standard plugins unlike asdf! Also, I often face an issue with GitHub IP quotas as each formula is on its own, often doesn't follow any basic security best practices or conventions, and does not use GITHUB_TOKEN to authenticate against the GitHub API. 90% of the plugin code for asdf is the same. I'm not sure why there's no basic framework that uses eget or other now-popular tools to fetch binaries for the proper arch from GitHub releases! That's why I use aqua [1], which just does this, and unlike asdf, is extremely fast as it has caching and downloads binaries in parallel.
Re:Ask HN: Homebrew, Asdf, Nix, or Other?
by s0l1dsnak3123 on Monday August 12, 2024 @08:49AM
(#41223807)
Asdf is great - I'm not knocking it at all and have built several scripts for it over the years - but I think mise might be a better tool for someone starting out from scratch: https://github.com/jdx/mise. These days I'm using nix, but it's not for everyone.