3 ms·
Would you drive on bridges or ride in elevators "inspected" by anons? Why are our standards for digital infrastructure and software "engineering" so low? I don
by 2OEH8eoCRo0 7mo ago
Would you drive on bridges or ride in elevators "inspected" by anons? Why are our standards for digital infrastructure and software "engineering" so low?
I don't blame the anons but the people blindly pulling in anon dependencies. The anons don't owe us anything.
- MetaWhirledPeas 7mo agoThis option is available already in the form of closed-source proprietary software. If someone wants a package manager where all projects mandate verifiable ID that's fine, but I don't see that getting many contributors. And I also don't see that stopping people using fraudulent IDs.
- mastermage 7mo agoDo you know who inspected a bridge before you drive over it?
- pamcake 7mo agoA business or government can (should) separately package, review, and audit code without involving upstream developers or maintainers at all.