4 ms·
This is an artifact of Google's policy to vendor every. single. dependency. Ironically, it makes building their stuff from source an absolute pain; if you think
by tadfisher 3y ago
This is an artifact of Google's policy to vendor every. single. dependency. Ironically, it makes building their stuff from source an absolute pain; if you think a vendored Python is bad, try building Android and post about it when it's done tomorrow.
- izacus 3y agoI'm sure they're very interested in supply chain attacks for operating system used by billions just to save you some time on your workstation at home.
- tadfisher 3y agoThere are ways to prevent malicious dependencies without having to vendor them.
- thebruce87m 3y agoThat’s typical for embedded. Yocto and buildroot do everything from scratch too.