3 ms·
Placing the burden of responsibility for security on the end user is not the way to go about this - at least, not if you want people to actually use your produc
by johnday 7y ago
Placing the burden of responsibility for security on the end user is not the way to go about this - at least, not if you want people to actually use your product / language.
Package managers do not only exist as a convenience. They should also provide guarantees about their packages, or at the very least some level of moderation.
- swiley 7y agoYou could make that argument about repositories not package managers (which are just software.) Some do! (Main OS repos (not community ones) do.) But the reality is that this takes man hours, so repositories have been set up without those guarantees in the name of efficiency and expectation of responsibility. I don’t think these are built because people “want users for their language” but because they were needed. This whole “you shouldn’t do that because it scares users away” thing tends to result in terrible software IMO.