2 ms·
Does the concept of LTS really make sense for languages that produce compiled executables? Taking Haskell as an example, the usual output may have dependencies
by tlavoie 9y ago
Does the concept of LTS really make sense for languages that produce compiled executables? Taking Haskell as an example, the usual output may have dependencies on some typical system shared libraries, not so much on the ecosystem from which it was compiled. If static compilation is an option, then there is very little runtime dependency on anything besides the OS.
Now, there could be a vulnerability in one of the packages you built against, but exploitation of that is going to also depend on whether that specific program uses the vulnerable bits of code, using inputs controllable by an attacker.
It's mostly moot compared to the story here anyway, as none of the others are beholden to any entity resembling Oracle.