←back to thread

A critique of package managers

(www.gingerbill.org)
109 points gingerBill | 1 comments | | HN request time: 0.202s | source
Show context
MangoToupe ◴[] No.45174285[source]
There are three points of prioritization here: you can use other peoples' code, manually vet all the code you're running, or accept that you need to trust a social network to vet stuff for you. Pick two. This is not a solvable problem.

EDIT: I've been rate limited, so the point is: unless you're Terry Davis, you're not going to be able to write software of any real complexity. Few people are going to even bother to vet the standard library, let alone the compiler, the runtime, etc etc.

replies(2): >>45174299 #>>45187771 #
1. gingerBill ◴[] No.45174299[source]
Use the first two, and not rely on the third at all. That's what the article is saying.