3 ms·
And because Debian has such strict curation, a lot of software ends up being distributed via other channels, either from alternative deb package repos or not us
by cortesoft 4y ago
And because Debian has such strict curation, a lot of software ends up being distributed via other channels, either from alternative deb package repos or not using a deb package at all.
If we add a lot of curation, you will end up with a lot of gems being forced out of rubygems. This will make people become used to sourcing gems from alternative locations, and you will lose even the most basic of protection you get from what rubygems is doing.
You, or anyone else, is welcome to create their own, curated and vetted, gem repository. It is not technically difficult to source gems from places other than rubygems, so if there was a demand, developers could use your curated service.
- ddevault 4y agoDebian's curation is not so strict as you suggest, and what's more: there are more distributions than just Debian. Add the packages you need and you'll be fine. I can speak from personal experience in this respect.
- cortesoft 4y agoThat’s my point. If you make it so people are required to go to other sources of packages for normal operations, then it normalizes untrusted distributors of packages.
- ddevault 4y agoI don't understand how your response follows from the points I made. In any case, people who need a package should add it to their distributions. This is what we should normalize. Especially for users like developers who depend on software libraries, who already have the necessary skillset and motivation.