On Wed, Jun 22, 2022 at 06:21:10PM -0400, Bijan Soleymani wrote:

[...]

> > This strikes me as a nightmare waiting to happen.
> 
> There was probably a similar feeling when .deb and dpkg and apt rolled out.
> Users are going to have dependency issues, etc. If libc breaks on upgrade 
> then everything dies, etc.

Actually, no. Because the libc package will be tested once it
arrives at your box (messups do happen, but way less frequently).

I think people underestimate the main service a (good) distribution
offers: a single source of trust. A group of people with a more or
less common set of processes, values, etc. trying to put together
a more or less consistent set of things. When the idea about how to
do things change, there is (sometimes heated) discussion, so you as
user can follow along (or change distro, if you don't like the
outcome).

Look at other package managers which only pose as a technical service
(say, PHP or npm). With npm particularly, it seems a package gets
taken over by a malicious actor every other week or so.

Besides, you /can/ set up a Debian package repo "out there" people
can add to their sources.list. After my past experiences with
debian-multimedia, I'll make sure I really want that.

Cheers
-- 
t

Attachment: signature.asc
Description: PGP signature

Reply via email to