I'm posting this here to show that the tension between Linux distro packagers and some software ecosystems, as shown in the "modern packager’s security nightmar

I'm posting this here to show that the tension between Linux distro packagers and some software ecosystems, as shown in the "modern packager’s security nightmare" post and its comment threads, is nothing new. I think Lars has a balanced take here. Also, I had to edit the long title just a bit. I dropped the word "really" in the first part of the title. Otherwise I hit the length limit.