4 ms·

> A universal package manager with a single reposotiry where anyone can push So no curation, no security guarantees, no quality control. This will give you man

> A universal package manager with a single reposotiry where anyone can push So no curation, no security guarantees, no quality control. This will give you many more apps, but most of them will be garbage, just see the google play store as an example. Is "size at any cost" actually a good goal?

smitty1e 6y ago
Sounds like a great business model for a RedHat or someone to sell subscriptions for curation and other tedious, yet needful, noise filtering.
- dane-pgp 6y ago
  "My own app store. Unauditable binary blobs being downloaded by lazy devops." https://www.youtube.com/watch?v=_cdEFF-ttLw https://www.youtube.com/watch?v=_cdEFF-ttLw
  - smitty1e 6y ago
    The whole point is that some Real Cash Money would help the signal-to-noise ration. Aside: how long until the GameStop "Downfall" parody?
nayaketo 6y ago
Play store is great imho. Yes there's a lot of garbage, but there's also a lot of great apps if you know where to look. For not so well known apps, read reviews and ask around on sites like Reddit and you'll be (mostly) fine.
- linkdd 6y ago
  Those steps are totally useless if you have quality/security control. I just look at the store and install the app. I don't want to spend more than 30s to decide if I want to install an app or not. I definitely don't want to have to go on reddit for that... Making sure the apps on the store are secure is not my job.
  - afiori 6y ago
    The store makes sure that the app is secure (via sandboxing), but you need to make sure that it is actually the app you want (quality)
viraptor 6y ago
We already have this - AUR can be used in Arch. It... could be worse. I guess it works pretty well because of the small scale.
- diffeomorphism 6y ago
  The AUR very deliberately does not offer packages but pkgbuilds.
vindarel 6y ago
It could work with Guix: it already works as a universal package manager on top of your distro (with reproducible builds, rollbacks, potentially sandboxed…) and it works with channels: the official one, and others for non-free software etc. I use it on top of Debian to get the recent version of Emacs and some dependencies (vterm). (https://guix.gnu.org/ https://guix.gnu.org/)

smitty1e 6y ago

Sounds like a great business model for a RedHat or someone to sell subscriptions for curation and other tedious, yet needful, noise filtering.

dane-pgp 6y ago
"My own app store. Unauditable binary blobs being downloaded by lazy devops." https://www.youtube.com/watch?v=_cdEFF-ttLw https://www.youtube.com/watch?v=_cdEFF-ttLw
- smitty1e 6y ago
  The whole point is that some Real Cash Money would help the signal-to-noise ration. Aside: how long until the GameStop "Downfall" parody?

nayaketo 6y ago

Play store is great imho. Yes there's a lot of garbage, but there's also a lot of great apps if you know where to look. For not so well known apps, read reviews and ask around on sites like Reddit and you'll be (mostly) fine.

linkdd 6y ago
Those steps are totally useless if you have quality/security control. I just look at the store and install the app. I don't want to spend more than 30s to decide if I want to install an app or not. I definitely don't want to have to go on reddit for that... Making sure the apps on the store are secure is not my job.
- afiori 6y ago
  The store makes sure that the app is secure (via sandboxing), but you need to make sure that it is actually the app you want (quality)

viraptor 6y ago

We already have this - AUR can be used in Arch. It... could be worse. I guess it works pretty well because of the small scale.

diffeomorphism 6y ago
The AUR very deliberately does not offer packages but pkgbuilds.

vindarel 6y ago

It could work with Guix: it already works as a universal package manager on top of your distro (with reproducible builds, rollbacks, potentially sandboxed…) and it works with channels: the official one, and others for non-free software etc. I use it on top of Debian to get the recent version of Emacs and some dependencies (vterm). (https://guix.gnu.org/ https://guix.gnu.org/)