3 ms·

You don't think desktop Linux users use pip or npm? (Also, speaking as a distro packager, we don't do as much vetting as Apple does and we certainly don't do a

• glennpratt 8y ago
  So you've moved beyond the security on the mechanisms of software installation to just saying you trust Apple and don't trust open source software. That's all this boils down to.
• flukus 8y ago
  > You don't think desktop Linux users use pip or npm? Most won't, only developers. Even there I'd say linux has an advantage because many of the dependencies in tools like that can be included by the distro itself. It hasn't worked well in practice so far but in theory it's a better solution. This is also identical across operating systems so it's hardly an example of one being superior to the other. > Also, speaking as a distro packager, we don't do as much vetting as Apple does and we certainly don't do as much sandboxing. I'm sure the vetting could be much stricter, but so far in practice it has not been an issue so I continue to trust responsible distros (debian, redhat, not arch). I'd also hope some distros like redhat are doing a lot more vetting.