4 ms·
Why can’t your web app serve its BOM on an API, maybe union its BOM with the OSes BOM to get the full system. I guess with a deep service graph this could get
by AlphaSite 6y ago
Why can’t your web app serve its BOM on an API, maybe union its BOM with the OSes BOM to get the full system.
I guess with a deep service graph this could get very complex very fast.
- indymike 6y agoSo now every web app has to encapsulate an equivalent to the entire os repository tooling + your entire build system + whatever devops tooling needed to deploy. Bonus... A lot of build tooling is to allow for faster upgrades than the OS provides... Especially with dynamic languages.
- silly-silly 6y agoNow imagine doing that for every package and container a linux distro provides. Welcome to hell enjoy your stay.
- indymike 6y agoAgreed. This will create lots of big, useless data though.
- AlphaSite 6y agoOh I think you Mia understand, the is generates one bom, your build tooling generates a second at runtime your web server unions the two and that’s the actual machine BOM.
- indymike 6y agoOh, I don't think I do. I do not want to have to write code that duplicates functionality of a build system in an http server which discloses what components are behind that server, exclusively so hackers can identify that some dependency of some library in some other software on the server is insecure in real time. No thank you.