3 ms·
So what’s more important, to be secure or to ship, then? I think people made their choice and the developers of the said maps are not responsible for whatever
by heavenlyblue 8y ago
So what’s more important, to be secure or to ship, then?
I think people made their choice and the developers of the said maps are not responsible for whatever comes out of map’ lack of security.
- acdha 8y agoThose aren't the only options. A key part of the original comment was “in its standard library” — in the modern era where package managers have existed for decades, it's quite reasonable to develop things in separate projects and only pull them into the standard library when they're more stable. That allows people to use them without giving the weight of being in the standard library. Similarly, you could require some sort of opt-in / runtime warning approach where you have to explicitly opt-in to having them and they're clearly marked as unstable. If you had to compile with a `ENABLE_INSECURE_MAPS` or do some sort of import from an experimental module it'd make it a lot easier for someone to recognize that they're doing something less stable than normal, similar to Rust having you mark code as unsafe.
- deleted 8y ago[deleted]