News for hackers. Stuff that matters.
Re:Astral – "We're building a new static type checker for Py... by pbronez on Wednesday January 29, 2025 @04:51PM (#42871684)
Looks interesting. Their “magic” package manager scares me though. Not excited to curl | bash something with strong opinions about my local python setup

curl -ssL https://magic.modular.com/deb11637-c8c3-4f76-9195-85af25ef2e... | bash

Re:Astral – "We're building a new static type checker for Py... by fuzztester on Thursday January 30, 2025 @05:25PM (#42882789)
I wonder why many groups are doing the "curl pipe to bash" thing these days.

I have been seeing this pattern for some years now, and also seen criticism of it.

do they not care about security, or is it not a security issue? conditionally or unconditionally, that is?