3 ms·

Personally, I don't want a middleman to be inserted between the application developer and me. I want to get my applications directly from the application devel

Personally, I don't want a middleman to be inserted between the application developer and me. I want to get my applications directly from the application developer, because that way I can make sure that I'm using the officially supported version of the app and that no one has meddled with the code. If I don't trust the application developer, I simply don't install the application.

gabrielgio 3y ago
> because that way I can make sure that I'm using the officially supported version No, they (the developers) can’t guarantee that, nor is their job. You would trust them to develop a reliable software and you would trust the maintainer to guarantee the it will be properly compiled for specific OS version, has the proper permission set and has all dependencies it requires to run. To ask the software developer to pack and make sure it works for all distribution would be huge amount of work that is beyond their knowledge (which it is not a issue). Also it seems one is not aware how to properly do it when they comes up with a not so bright ideas like the “curl | bash”. It is not you don’t trust the developer, it is that there are people who know how to better distribute it. obs.: this is in the context of micro and general FOSS that is easily available and distributable.