4 ms·
I do care about those things ;) > Hmm, how is it different from, say, `apt`'s security model? Core Debian packages are handled by Debian Security Team, Homebr
by mstaoru 4y ago
I do care about those things ;)
> Hmm, how is it different from, say, `apt`'s security model?
Core Debian packages are handled by Debian Security Team, Homebrew packages are more like npm, where anyone can upload anything at any time. Also Homebrew's PATH fiddling is very insecure (check https://infotoast.org/site/index.php/2021/05/30/homebrew-is-a-major-security-flaw-install-macports-instead/ https://infotoast.org/site/index.php/2021/05/30/homebrew-is-...). MacPorts come with their own problems. It's just an all-around hacky, insecure software supply chain that is anything but trustworthy.