3 ms·
I'm not sure what regulated means (eventual consensus?), but I think *from inside the Postgres toolchain* is important. For context, there are a few efforts in
by fforflo 3y ago
I'm not sure what regulated means (eventual consensus?), but I think *from inside the Postgres toolchain* is important.
For context, there are a few efforts in progress. I'm sure there are more.
- https://pgxman.com https://pgxman.com
- https://pgt.dev https://pgt.dev
- pgxn v2: https://github.com/orgs/pgxn/projects/1/views/1 https://github.com/orgs/pgxn/projects/1/views/1
- KingOfCoders 3y agoWith regulated I mean, curated by a group of postgres committers for example. I do think extensions inside postgres are very prone to supply chain attacks, so it should not be managed the way npm is.
- adobrawy 3y agoHow npm is regulated? Anybody can publish their package on npm as they can do on GitHub. There is no up-front review on npm. Only packages that are clearly harmful to the community are removed from npm.
- KingOfCoders 3y agoYes, as I wrote, npm is not regulated.