3 ms·
Linux distributions contain a curated set of packages. And, if any, distros like Guix can import NPM crap and at least place it under an isolated container for
by anthk 9mo ago
Linux distributions contain a curated set of packages. And, if any, distros like Guix can import NPM crap and at least place it under an isolated container for work so the rest it's unharmed.
- PunchyHamster 9mo agoalso you're getting at least some of crowd safety in it. If you're using Debian Testing or a rolling distro your package was probably tested by a bunch of people already. If you're using stable/LTS branch, there were far more eyes on it too And packages are signed, can't just hijack web domain to inject code