3 ms·

The entire paragraph about version pinning using hashes (and using a map lookup for in-workflow binary deps) reminds me that software engineers are forever doom

by Zopieux 7mo ago

The entire paragraph about version pinning using hashes (and using a map lookup for in-workflow binary deps) reminds me that software engineers are forever doomed to reinvent worse versions of nixpkgs and flakes. I don't even love Nix, it's full of pitfalls and weirdnesses, but it provides so much by-default immutability and reproducibility that I sometimes forget how others need to rediscover this stuff from first principles every time a supply chain attack makes the news.

nDRDY 7mo ago
>worse versions of nixpkgs and flakes You mean statically-compiled binaries and hash pinning? Those have been around a bit longer than Nix :-)
- Zopieux 7mo ago
  Were they deployed at scale in such a way that most (open and some non-free) software is packaged as such? I've never seen this happen until nixpkgs.
- tclancy 7mo ago
  Every generation thinks they invented sex. And hash pinning, which now sounds dirty.
HumanOstrich 6mo ago
Nix is a nightmare and so it usually gets paired with Rust for people who have a complexity fetish.