Debian/Ubuntu etc generally have packages for a subset of programming language libraries. The problem tends to be that users don't like the lag introduced by t

Debian/Ubuntu etc generally have packages for a subset of programming language libraries. The problem tends to be that users don't like the lag introduced by the packaging process. It's definitely a valid strategy to get "more trusted" libraries to restrict yourself to ones that are available the the OS package manager. Of course you should understand the limits of that trust ( for example AFAIK there is no security code review involved in the debian package process)