5 ms·
> Rightfully so who cares if some nameless guy in a shack contributed to your third-party libraries? anon people contribute to open source software all the tim
by w4ffl35 3y ago
> Rightfully so
who cares if some nameless guy in a shack contributed to your third-party libraries? anon people contribute to open source software all the time, its irrelevant, as is their living situation.
- numpad0 3y agoNo one cares that your equipment is based on early works by young Isaac Newton. But; ... if you tell them that he is actually a living man in rural Nebraska, presently mixing dehydrated macaroni on one hand, holding his crude manuscript in the other hand, actively adding fixes to fundamental errors in it, and that multiple copies of that manuscript is used to control anything from lightbulbs to government communications to fission reactors, right now, that is not going to let them sleep better at nights. And they ARE starting to get uncomfortable with that.
- blueflow 3y agoPeople who will have to vendor that code.
- w4ffl35 3y agolook at all these libraries that i package with my distributed software: https://github.com/Capsize-Games/aihandler/blob/master/setup.py https://github.com/Capsize-Games/aihandler/blob/master/setup... On top of that, there are dependencies for each of those libraries. i don't know the names of any of the people that wrote any of that code and I don't intend to dig into it.
- blueflow 3y agoYou don't vendor anything. You only name it as dependency. I'd fail my audits if i did that.
- w4ffl35 3y ago> You don't vendor anything. You only name it as dependency i'm not? how are you using the term "software vendoring" specifically? I am packaging with pyinstaller and distributing as an app.
- blueflow 3y agoSimplified: locally-stored forks of all dependencies where we also commit our own patches to.