2 ms·
So can a random deb, or npm package, or pip wheel? You’re either ok with executing unverified code or not - piping wget into bash doesn’t change that
by maccard 11mo ago
So can a random deb, or npm package, or pip wheel? You’re either ok with executing unverified code or not - piping wget into bash doesn’t change that
- dubi_steinkek 11mo agoMaybe they can with postinstall scripts, but they usually don't. For the most part, installing packaged software simply extracts an archive to the filesystem, and you can uninstall using the standard method (apt remove, uv tool remove, ...). Scripts are way less standardized. In this case it's not an argument about security, but about convenience and not messing up your system.